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PREFACE : 


aA 


When IBM announced the Personal Computer in 1981, “personal” was 
` an appropriate adjective to use in the name. `A PC was used by people 
who wanted their own computer to run their own applications and 
manage their own personal files instead of using minicomputers and 
mainframes that were strictly controlled by the information systems 
department. The operating system that was very popular was DOS. The 
late 1980’s witnessed another concept known as connectivity, wherein a 
standalone personal computers could be connected to one another, 
forming a network of computers. > 5 ee 


` 


. LAN which stands for Local Area Networks is one such type of network 


which connects various stand alone machines. LANs require a second _ 


operating system over and above DOS. The most widely used LANs the 
world over is NetWare - a network operating system from Novell. 


Sharing of various costly resources like data, computers, printers etc. 
and effective electronic communication are some of the advantages 
offered by LANs. They allow expansion of computer resources in line 
with growth of the organisation, ultimately forming an Integrated 
Corporate Electronic Communication Network which means bringing 
people close to one another. : 
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The purpose of this book is to develop your skills in : 
r Networking Basics and LAN concepts. 
we The NetWare file system. 


er Printing in a NetWare environment. 


a NetWare Security. 


r Network Communications. 


Cr Using NetWare utility programs such as SYSCON, FILER etc. 


The material in this book is brought to you by the Design Team which is 
continuously striving tom bring you the best and the latest in 
Information Technology. The process of design has been a part of ISO 
9001 certification of Aptech - IT division, Education Support Services. 
As a part of Apetch’s quality drive, this team is continuously researching 
and panne upon the curriculum to keep it in line with the industry 
tren 


The research and development ‘team will be glad to receive any 
suggestions. The students must feel free to send feedback to the Design 
Head at Aptech’s Corporate Office, Bombay. 
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Chapter 1 


Network Basics . 


The objective of this session is to make you understand : 


What is a computer network ? 
Advantages of a computer network. 
Network components 
Classification of networks. 

Local Area Networks 

© Features of LAN 

© LAN topologies 

The OSI model 

The Network O.S. 

Workstation O.S. 

Network Protocols 

LAN Standards 

Logging in 

Login Scripts 

Logging out 

Tasks of a Network Administrator 


99999 


993999999 


1.0Introduction 


Networking in its simplest sense means connecting two or more 
computers together for the sharing of information and resources. The 
size and complexity of a network may vary from just two computers 
connected together to a much more complex network that connects all 
the computers of a worldwide company. The basic reason for the 
existence of networks is that the PC is a single user device and a 
network can change a group of isolated PCs into a coordinated multi- 
user computer system. 


In this session. we will understand the basics of network, its advantages 
and its components. We will then understand how networks are - 
classified and will focus our attention on LAN, a type of network which 
is most commonly seen. i 
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This chapter also covers the network and the workstation operating 
systems, how the user can connect himself to the network and the tasks 
of a network administrator. 


1.1 What is a computer network ? 


We come into contact with all sorts of networks everyday. The telephone 
system is a network of a sort, as is a system of roads or railways in a 
continent. 


A computer network thus is a collection of hardware and software that 
enables a group of computers to communicate and provide users with 
access to shared resources. These “shared resources” include data files 
(a spreadsheet or memo), applications (a word processor or a database 
management program), and hardware (such as printers and modems) 
and other related resources. 


A network is basically a communication system for computers. Just as 
the telephone system allows two people to talk to one another, networks 
allow computers to communicate. Any communication system requires 


one or more transmitters and receivers, a message and a 


communication channel. 


Figure 1.1 illustrates a simple computer network where Computers A 
and B can communicate and share resources through Computer C. 
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1.2 Advantages of Networking 


As already mentioned , a network can convert a group of isolated users 
into a coordinated multi-user system. A network connected user can 
easily and legally share copies of software packages with other users, as 
well as access network connected peripherals. A network is ideal for 
database systems in which multiple users need to access as well modify 
the database frequently. 


Computer networks thus, can help any organization run more efficiently 
economically and effectively. The benefits of networking are :- 


Note > NetWare is the Network Operating System from Novell. All 
references and examples are with respect to NetWare. 


@ Program and File sharing 


Network versions of many popular software packages are available 

at considerable cost savings when compared to buying individually. 

licensed copies. The program and its data files are stored on a 
` particular terminal for access by any network user. 


@ Network resource sharing 


Network resources include printers, plotters, and storage devices 
which can be shared by terminals hooked on a network. For 
example consider the sharing of a resource such as a storage 
device. It is more efficient and economical to store an application on 
a network drive rather than storing a copy of it on each of the user’s 
local storage device. Thus, by reducing storage needs, hardware 
costs are also reduced. Similarly a single printer (which is the most 
common shared resource) can suffice the requirement of around 10 
users on a network. 


@ Database Sharing 
A database program is an ideal application for a network. A network 
feature called record-locking lets multiple users simultaneously 


access a file without corrupting the data. Record locking ensures 
that no two users edit the same record at the same time. 


a 


3 Nétwork Basics 


CC-0. Bhagavad Ramanuja National Research Institute, Melukote Collection. 


Funding: Tattva Heritage Foundation,Kolkata. Digitization: eGangotri. 


Economical expansion of the PC base 


Networks provide an economical way to expand the number of 


computers in an organization. í 
Inexpensive diskless workstations that use the server's hard drive 
for booting and storage can be attached to the network. 


Ability to use network software 3 


A class of software called Groupware is designed specifically for 
networks. It lets users interact and coordinate their activities. 


Ability to use electronic mail 


Electronic mail lets users easily communicate with one another. 
Messages are dropped in "mailboxes" for the recipients to read at a 


convenient timè. 
Creation of workgroups 


Groups are important in networks. They can consist of users who 
work in a Department or who are assigned to a special project. With 
NetWare, you can assign users to groups, and then give each group 
access to special directories and resources not accessible by other 
users. This saves the trouble of assigning access to each individual 
user. Network workgroups facilitate new "fat" corporate structures 
in which people from diverse and remote departments belong to 


special group projects. 
Centralised Management 


Because NetWare uses dedicated servers, these servers can be 
grouped in one location, along with the shared resources attached 


to them, for easier management. 
Hardware upgrades, software backups system maintenance, and 
system protection are much easier to handle when these devices 


are in one location. 


Security 


` Security starts with the login procedure to ensure that a user 
accesses the network using his or her own account. This account is 
tailored to give the user access only to authorised areas of the 
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server and the network. Login-restrictions can force a user a log in 
at one specific station and only during a specific time frame. 


© Access to more than one operating system 


NetWare provides connections for many different operating systems, 
including DOS, OS/2, UNIX, AppleTalk for ver 3.11 and more for ver 
4.0 onwards. Users of these systema can store and access files on 
the NetWare < Server. 


© Enhancement of the Corporate structure 


Networks can change the structure of an organization and the way 
it is managed. Users who work in a specific department and for a 
specific manager no longer need to be in the same physical area. 
Their offices can be located in areas where their expertise is most 
needed. The network ties them to their department managers and 
peers. This arrangement is useful for special projects in which 
individuals from different departments, such as research, 
‚production and marketing, need to work closely with each other. 


1.3 Components of a Network 


A network is made up of hardware as well as software components The _ 
hardware consists of network interface cards in all the: machines and 
the cables that tie them together. The software includes the drivers for 
all peripherals and the network operating system (NOS) that este 
the nenori ; 


The copitas d other devices communicate with each other on a 
network. They are called as nodes or workstations. In most computer 
networks, most nodes functions as transceivers; i.e. they both transmit 
and receive messes: Figure 1.2 illustrates the network componen 


cyanate networks have the following fundamental Sapone - 
a Server’ 


A server is an important component of a dedicated server aive The 
server runs the network operating system and offers network services to 
users at their individual workstations. 
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user management, network 


i i .security, 
These services include file storage, Se ty. e 2 an 


commands and options for users etc. depending on 


Printer 


<= 


Workstation 


interface card sal Server 


Figure 1.2 Components of a Network 


The most common type of server is the File Server. The file server does 
not need any special hardware. It is just a computer with one or more 
hard disks. Since the servers’ hard disk is shared, it is typically of a 
much larger capacity. Users access files stored on the file server as if 
they were using their own hard disks. 


This allows for sharing of programs as well as data. If sharing is not 
desired, private disk areas can be set up for individual users. 


File servers perform another important function on the network. 
Printers connected to the server can be accessed directly by all the 


users of the network. When the program running on a client CPU 
generates a print command, the file to be printed is transparently 
diverted to the server and sent to the shared printer. If the printer is 
busy with some other printing job, each user's file is converted to a 


separate file and put in a print queue.’ 
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File Servers can be :- 
œ Dedicated Server 


In a dedicated server one or more computers are set aside as 
file servers and not used for anything else. 

Users access shared directories and resources on the dedicated 
server, but not on each others' systems. 


@ Nondedicated Server 


A server can operate in a non-dedicated mode. Here, the 
machine used as server can also operate as a workstation. 
Some amount of memory is kept aside for the local mode. 


æ Workstations 


When a computer is connected to a network, it becomes a node on the 
network and is called a workstation or client. A workstation has its 
own local operating system depending on the machine type. 
Workstations can be DOS-based PCs, Apple MACs running System, 
Unix-based machines, Systems running OS/2, and diskless 
workstations. Thus, a network connected computer can behaves in its 
normal mode except that it can retrieve files from more places. 


Traditionally, a workstation's job has been to execute program files 
retrieved from the network, and the server's job to deliver those files to 
the workstation. Thus, most of the processing is performed at the client 
workstation and the server delivers the files to be processed. However, 
with the advent of network based client-server computing,. the role of 
the server has changed drastically. In this distributed processing 
environment, the processing burden is shared by -both components of 
the network. 4 ` 


For example, in client server databases, the workstation provides the 
user interface while the database server or database engine performs 
the task of searching, indexing and modifying the database. 
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o- Network interface Cards 


Each computer attached to a network requires a network interface card 
(NIC) that supports a specific networking scheme such as Ethernet, 
ArcNet, or Token Ring. The network cable is attached to the NIC. 


Some networks do away with the cable by using radio or infrared signals 
for transmission. 


<= Cabling System ` 


The network cabling system is the media used to connect the server and 
the workstations together. In the case of wireless networks that use 
radio or infrared technology, cable is not required. : 


æ Shared Resources and Peripherals 


Shared resources and peripherals include storage devices attached to - 
the server, optical disk drives, printers, plotters, modems and other 
equipment that can used by everyone on the network. Sharing hardware 
not only reduces costs by making duplicate purchases redundant, but 
LAN users can access a wide variety of equipment as shown in the 
Figure 1.3 below. 
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1.4 Classification of Networks 


Networks are classified upon the geographical area they span into the 
following categories :- 


© Local Area Network (LAN) 


A private network within a range of 10 kilometers, owned and 
controlled by a single organisation: 


LAN has three main characteristics :- 
1. A diameter of not more than three kilometers .- . 
2. A total data rate at least several Mbps (Mega Bytes/Sec). 
3. Complete ownership by a single organisation. | 
© Wide Area Network (WAN) 


` A public network connecting different cities and towns mostly 
through telephone links or microwave links through a satellite. 
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The features of WAN are :- 


1. - It typically spans entire countries. 

2. It has data rates below 1 Mbps. 

3. Itis owned by multiple organisations (the carrier owns the 
communication subnet and numerous clients own the hosts). 


© Metropolitan Area Network (MAN) 


A public or private network used to connect various locations 
including suburbs in a metropolitan cities. The MAN is in between a 
LAN and WAN. A MAN is a network that covers an entire city, but 


uses LAN technology. 


Cable television(CATV) networks are examples of analog MAN’s 
for television distribution. 


1.5 Local Area Networks (LAN) 


“A local network is a communication network that provides 
interconnection of a variety of data communicating devices within a 


small area. 
There are three elements of significance in the above definition. 


© First a local network is a communications network. That is, itis a 
facility for moving bits of data from one attached device to 
another. 


@ Second, the term data communicating devices include any device 
over a transmission medium. 


Examples :- 

Computers 

Terminals 

Peripheral devices 

Sensors (temperature, humidity, security, alarm sensors) 
Telephones ; 
Television transmitter and receivers 


Facsimile 
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Note that not all types of networks are capable of handling all of 
the above devices. 


© Third, the geographic scope of a local area network is small. The 
most common occurrence is a network that is confined to a single 
building. Networks that span several buildings such as a college 
campus or military base are also common. 


1.5.1 LAN Topologies 

The topology of a network refers to its shape i.e. how the cables are 
arranged. All network topologies derive from two basic types : the hus 
and the point-to-point. 

© Point-to-Point link (P-P link) 


Point-to-Point links are easiest to understand. They look like the simple 
network as shown in Figure 1.4 


Transmit Receive 


Figure ba Point-to-Point network 


A P-P link actually consists of two functions : transmit and receive. Each 
station transmits to the other station’s receiver. The characteristic of a 
P-P link is that each station receives exactly from one transmitter, and- 
each transmitter transmits to exactly one receiver. The transmit and 
receive operations can occur over separate wires or they can take turns ` 
over the same wire using a variety of techniques. With LAN’s separate 
wires (for transmit and receive operations) are used for better 
performance. Point-to-Point networks can grow in several ways. One 
method is simply to install a P-P link between each pair of computers in 
the network. This approach is called a Mesh. Figure 1.5 illustrates a 
type of mesh network. 
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Figure 1.5 Mesh Network 


The more common way of expanding networks is by using a ring. A ring 
connects the transmit component of each node to the receive 
component of the next node in the ring. Signals are transmitted around 
the ring from node to ring. : 


Figure 1.6 Ring Network ' 


Another approach is the Star network. In this type of network, each 
node has a P-P link with a central hub. 
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y Figure 1.7 Star Network 


© Bus Network 


A bus network consists of a single medium that all the stations share. 
Basically stations on a bus are like people in a room; when they talk, 
the same sound waves carry all conversations to all people in the room. 
Everyone hears everything that is said in the room. On a bus network, 
all stations share the same medium. Because everyone is sharing, only 
one station can transmit at a given time. 

Bus networks can-be expanded easily by simple Eoee the bus 
wire. 


Figure 1.8 Bus Network 
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1.6 OSI reference model 


The Open Systems Interconnection (OSI) model was intended to be a 
blueprint for a set of worldwide communication standards, that would 
enable all computers everywhere to get inter-connected easily. The OSI 
model itself is a useful tool for discussing how a LAN works. 


The easiest way to design networks is to break processes down into 
layers. One advantage of layers is that it is possible to solve a piece of 
the communication puzzle rather than trying to solve the entire thing at 
once. Another advantage is that one layer at a time can be updated to 
fix bugs and add features without affecting other layers. 


The layered approach of the OSI model looks like in Figure 1.9. 


The model breaks the process of LAN communication down into seven 
steps. Let us examine each layer in turn, starting from the bottom of the 
pile. The goal is to understand the relevance of each layer in the model. 


© Physical Layer (Layer 1) 


The physical layer is the layer that decides what signals will be 
transmitted on the LAN medium. At this level, the network is concerned 
only with transmitting bits - 1’a and 0’s through the network. 

Other layers have the job of combining these bits to form characters, 
words, and entire messages. Technically, the physical layer is not 
concerned with cabling, but only with the signals that are sent on the 
cable. The physical layer is nevertheless related to the cabling system 
that is used to interconnect devices on the network. À 


© Data Link Layer (Layer 2) 

The following are the functions of the Data Link Layer :- 

I. The data link layer is responsible for breaking messages into bits so 
the physical layer can deliver them. Also, when a message is 
received, the data link layer recombines the Sequences of bits to 
reconstitute the original message. vbr Se : 


2. The data link layer is responsible for is establishing a node-to-node 
communication. : 


Re Fe aS a E 
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3. Itis also concerned with making sure that the network is used in - 
. an orderly way. ` 


For example, in a meeting if two ‘people speak simultaneously, 
communication will probably be vague. It’s the same thing with LAN’s. 
The data link layer therefore performs an medium access control to ` 
ensure that all network communications take place smoothly. 


Host A 


Host B 


Layer 7 protocol 


Layer 6/7 interface | 


Layer 6 protocol 


Layer 5/6 interface 


Layer 5 protocol 


Layer 4/5 interface 


Layer 4 protocol 


.Layer 3/4 interface 


Layer 3 protocol 


Layer 2/3 interface 


` Layer 2 protocol 


Layer 1/2 interface 
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© Network Layer (Layer 3) 


The network layer builds on the node-to-node communication services 
that are provided by the data link layer. Networks are seldomly simple 
and there arises a need for a node-to-node-to-node communication 


instead of a simple node-to-node communication. 
The network layer is responsible to ensure that messages are delivered 


through a network where many messages have to go through several 


nodes before they can reach their destinations. 
The unit of information at the network layer is called a packet, and the 


network layer is concerned with routing packets through a network. 
Routing is a formal network term for the message redirection that takes 


place at this layer. 
© Transport Layer (Layer 4) 
LAN’s are extremely reliable mechanisms for delivering messages. 


A reliable service in a network terms means that a transmitting node 
will always receive a confirmation when a message is correctly received 
and perhaps an error report in the message is messed up. The transport 
layer provides quality service and accurate delivery by perform error 
detection and correction. It ensures that data is received completely and 
in a proper order. 


© Session Layer (Layer 5) 


The session layer establishes a formal dialogue between nodes. 
Basically, the session layer adds even more rules to the ones that are 
established by the network layer. 


The NetWare equivalent of a session layer service is the login process. 
When a user logs in, he or she is connected to the server. The 
workstation is recognized and procedures are established for sending 
messages between the server and the workstation. Basically, the login 
process is what turns a PC into a client of a NetWare server. 


© Presentation Layer (Layer 6) 
The presentation layer presents data to the application layer. In the 


process, the presentation layer is supposed to give data a uniform 
appearance that the application layer can recognize. 2 
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The presentation layer performs tasks like data encryption, data 
compression and format conversion. 


© Application Layer (Layer 7) 


The application layer is the layer that supports the applications of users 
and enables them to connect to the network. 


Services that are supported at the application layer include the 
following :- 


Protocols for remote file access 

File transfer services 

Remote program access ; 
Global directory services to locate resources on the network 
Remote job execution 


1.7 Network Protocols 


A protocol is nothing more than a precise set of rules that govern how 
two people or things will interact. A network protocol enables two or- 
more devices to interact smoothly and efficiently. If all nodes obey 
protocols, errors will be infrequent and everyone will know what to do 
when the error occurs. A node knows how to format data that is being 
transmitted and what to expect when the data arrives at the intended 
recipient. The main elements of a protocol are :- 


Syntax 
This deals with options like data format to be followed, signal levels etc. 
Semantics , 


This includes control information for the proper aracta of the 
protocol such as co-ordination and error handling. 


Timing 
Deals with speed matching and sequencing ofinformation. 
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1.8LAN Standards 


It has long been accepted in the communications industry that 
standards are required to govern the physical, electrical, and procedural 
characteristics of communication equipment. In the past, this view had 
not been accepted by the computer industry. 


Protocol standards are necessary since it is essential that equipment of 
different vendors can be interfaced. Hence, computers from different 
vendors must communicate with each other and, with the ongoing 
evolution of protocol standards, customers will nor longer accept 
special-purpose protocol conversion software. i : 


The key advantages of standardisation are : 


e A standard assures that there will be a large market for a 
particular piece of equipment or software. This encourages 
mass production and, in some cases, the use of large-scale 
integration (VLSI) techniques, resulting in lower costs. 


e A standard allows products from multiple vendors to 
communicate, giving the purchaser more flexibility in using 
and selecting the equipment. 

a 


The principal disadvantage of standards is they: tend to freeze 
technology and by the time a standard is developed, subjected to review 
and compromise, more efficient techniques are possible. Nevertheless, 
looking at the advantages it has, the customers are willing to pay the 
price. 


Here in this book we are concerned with standards that have been 
developed to specify services and protocols used for networks. 


The major standards developed for local area networks are : 
© IEEE (Institute of Electrical and Electronic Engineers) 
The Institute of Electrical and Electronic Engineers has established 
committees to develop standards for local area networks. The 


groups are collectively called the IEEE 802 LAN Standards 
Committees. 
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© ISO (International Organisation for Standardisation) 3 


ISO is a voluntary body. It is an international agency for the 
development of standards on a wide range of subjects. Although 
ISO is a non-governmental organisation, more than 70 percent of 
ISO member bodies are governmental standards institutions or 
organisations incorporated by public law. 


© ANSI Standards and Accredited Standards Committee X3 


ANSI is a non-profit, non-government federation of standards- 
making and standards-using organisation. It’s members include 
professional societies, trade associations, government and 
regulatory bodies, industrial companies and consumer groups. 
ANSI is the national clearing house for voluntary standards in the 
United States and is also the U.S. designated voting member of the 
ISO. ; 


© The International Telegraph and Telephone Consultative 
Committee (CCITT) 


CCITT is a member of the International Telecommunications Union. 
(ITU). It. sponsors a number of standards, dealing primarily with 
data communications. networks, telephone switching standards, 
digital systems and terminals. 


e 
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1.9The Network Operating System (NOS) 


By now, we certainly know that a computer is nothing without an 
operating system. The PC needs DOS, Windows, OS/2, System 7, Unix 
or something similar to turn it into a functioning computer. Like the PC 
needs an OS, so does the network file server. 


NetWare is one of the several operating systems that can runs a network 
file server. NetWare is called a network operating system (NOS), and 
does more than the operating systems used on personal computers. 

NetWare does much more than simply share files. It has to ensure that 


only certain users can access certain files. This is significant, security is 
certainly a most important issue in local area networks. 
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Figure 1.10 Network Operating System 
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1.9.1 Requirements of a NOS. 

A NOS mostly does the same work for the file server that the’ PC's 
operating system does for the PC. It manages disk access, file storage 
and memory utilization. But, a NOS has additional responsibilities. 
These include managing multiple users and file server security. It also 
provides the network administrator with tools to control and administer 
the network. It cooperates with the client's local operating system in 
such a way that using network resources‘is a natural extension to using 
PC resources. 
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For example, in an IBM PC environment, different disk drives are 


,accessed using drive letters. Hence, an operating system like NetWare 


assigns drive letters to file server volumes, so that accessing different . s 
parts of the file server is just like accessing a different drive on the PC. 
Similarly, on a Macintosh, the NOS provides icons to access server 
based software and printers. 


In addition to these traditional features, a modern network operating 
system needs to offer a number of features as described below - 


@ 


Network adapters and cables 


A NOS must support many types and brands of network interface 
cards. NetWare includes drivers for most of the popular NICs and 
makes other drivers available as needed. 


Global Naming 


A global naming system provides for users to view and access 
resources and other users anywhere on the network without the 
need to know exactly where those resources are. Users simply 
browse and choose from a list. 


File and Directory Services 


All the users of a network store their files in the same storage space 
on the central file server. Users may place private files on this 
shared server. As a result, security and integrity of data becomes an 
important feature. Directory access must be controlled to limit 
unauthorized users from viewing or changing files. 


System Fault Tolerance 


_ A fault-tolerant system provides a way to ensure network 7 


survivability if components fail. With NetWare’s System Fault 
Tolerance (SFT) feature, the server's hard drive can be mirrored by a 
second hard drive, thus providing continuous real time back-up. 
The mirrored drive-can be on the same controller or attached to a 
second controller (called duplexing) that further ensures hardware 
integrity. Duplexing of the entire server is provided with SFT level 
Ill, available as a second product. 
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@ Disk Caching 


Disk caching improves hard disk performance by using system 
memory as a holding area for blocks of data from the disk that may 
be accessed again. Accessing the information in the memory is 
much faster than getting it from the hard drive. ; 


© Transaction Tracking System (TTS) 


A transaction is a change in a record or set of records in a database 

file. A NetWare feature called transaction tracking is used to protect 
database files from corruption should a workstation or server fail in 
the middle of a transaction. If a complete transaction is not 
finished, the TTS backs out any changes made during the 
transaction and restores the database to its former state. 


@ Login Security 


A NOS provides a reliable password and security system that can 
lock or limit user access to the server, its directories and its files. 
NetWare provides features through which a user can be prevented 
from logging in from terminals other than those to which he or she 
is assigned. It can also put time restrictions on a user's session so 
that, for example, no user can log in after 5:30. 


© Bridge and Router support 


Bridges and routers allow networks to connect with other networks. 
NetWare ver 4.0 provides internal as well as external routing 

: support. Internal routing implies that the server performs the 
necessary routing functions internally. Two networks can be 
connected simply by installing Network Interface Cards for both 
networks inside the server. External routines implies that a special 
purpose router is included in the networks. This reduces the 
processing burden on the server. 


© Gateways 
Gateways allow systems with different protocols to interconnect by 


performing the necessary protocol conversion. For example, a Novell 
LAN can connect to an IBM mainframe system through a gateway. 


FD PM pS a aS 
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© Special servers 


Peripheral servers such as print, fax and modem servers have 
already been discussed. In addition to these, there is a new breed of 
superservers that provide special fault-tolerant disk arrays, 
multiple processors, and vast memories. 


© Software management tools 


Software management tools are important as networks grow in size. 
This is especially important in the case of MANs and WANs where - 
servers may be distributed over a large geographic area. One 
solution is to centralize managers and then give them tools to 
manage servers and workstations remotely. In NetWare, users can 
access servers from remote workstations as if they are operating 
from the console with the help of remote console and remote 
management capabilities. This helps in proper maintenance and 
management of the.networks. 3 


1.10 Workstation Operating System 


Many types of PC’s can be used as workstations. NetWare supports 
DOS, Windows, Windows NT, OS/2, Macintosh and Unix workstations. 
The network workstation is called as a “client” and LAN computing as 
client/server computing. Each workstation requires its own operating 
system so that it can be started up before it can be connected to the file 
server. Thus, the workstation operating system runs workstations. 
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Figure 1.11 Workstation Operating System 
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1.11 Connecting yourself to the network - Logging In 


The process of connecting your computer, or workstation to a specific 
server or servers is called logging in. : 


or 


` 


Logging in is the process of requesting permission from a file server to 
access files and resources that are available through the network. 


_ Users can log in by specifying the server name, the user name and the 
user password. NetWare checks to make sure that the user name and 
the password are valid, and then grants various rights. 


The LOGIN command is used to log into a file server. Because this 
command is located on the file server, the server login prompt should be 
displayed on the screen. In most cases, the user logs in from the F: 
prompt. 


The general procedure to log in is as follows :- 
(It is assumed that the workstation is connected to the network) 


© Switch to the login prompt if necessary. In most cases this is the F: 


prompt. 
@ Type the appropriate LOGIN command and then press ENTER. 


© if there is only one server on the network, or the user 
wishes to log in the default server, type login, a space and 
then user name. For example, if the user name is Eric, 
then he can login by typing: 


login Eric 


© Ifthe network has more than one server, and the user 
wants to log in to a specific server, type login, a space, the 
name of the server, a slash (or backslash), and then the 
user name. For example, for user Eric to log in to server 
Aptech, the command would be : 


login Aptech/Eric 
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© Type the password and press ENTER. The login scripts 
(covered later) run and the user is ready to use the . 
network. 


1.12 Login Scripts 


Login scripts are small programs that run when the user logs into the 
server. A system login script is generally created by the LAN 
administrator, and is run for every user upon logging in to the server. 
After that, the user login script runs. The system and the user login 
script together sets up the NetWare environment and determines the 
files and resources to which the user has access. 


Basically NetWare has three types of login scripts : 
1. Default Login Scripts 


Default Login Scripts set up basic mappings on the network 
provided the user login script does not exist. 

The commands found in the default login script are established as 
a part of the file LOGIN.EXE and cannot be altered. 


2. System Login Scripts 


The system login script is a login command file that is run for every 
user who logs into the server, and hence this script sets up things 
that every user needs. The system login script is stores in a text file 
called NET$LOG.DAT. 


3. User Login Scripts 


Each user can have an individual user login script. Although users 
are permitted to edit their own login scripts, it is likely that a 
supervisor will maintain most user login scripts. The script is stored 
in a file called LOGIN, in the user’s directory. User login scripts 
contain commands that personalise the network environment for 
the user. - 


1.13 Logging Out 


The LOGOUT command breaks the connection to the file server. After 
the user logs out, the computer is once again a stand-alone machine, 
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without access to the files, applications, and hardware that were 
available when the user logged in to the network. 


1.14 Tasks of a NetWare administrator 


Before leaving this session let us have a look at who is a NetWare 
administrator and what are his responsibilities. 


The tasks of a NetWare administrator are : 


@ Installing and Managing Servers 
© Installing and Configuring Workstations 
© Installing Networks 
@ Managing Users and Network Security 
e Installing Shared Applications 
@ Providing the User Interface 
© Training Users 
@ Managing Server Resources 
© Protecting Data 


@ Documenting Network Configurations and Procedures 


@ Resolving User Problems . 
SS cane ee a a 
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Summary 


In this session we understood : 


[U What is a computer network and advantages of networking. 


Network Components. 


Types of networks. 


i 

HW 

[U What are local area networks and their features. ' 
[U What are the different LAN topologies. 

Pa 


The OSI model. 


nn nn eR ETT 


27 Network Basics 


CC-0. Bhagavad Ramanuja National Research Institute, Melukote Collection. 


Funding: Tattva Heritage Foundation,Kolkata. Digitization: eGangotri. 


85) What is a network and a workstation O.S. 


as What are Network Protocols and LAN standards. 


[ù Howto get yourself connected to the network.: 


[U What is a login script. 
fo How to log out. 


[U What are the tasks of a Network Administrator. 
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Chapter 2 


Working with NOS 


The objective of this session is to make you understand : 


& Network Directories 
= Types of NetWare directories 
= NetWare Volumes 
= NetWare directory structure 
& File/Directory Commands 
= View directory contents - ndir 
© View directory structure - listdir 
- & Copy a file -ncopy 
. > Viewing and creating drive mappings - map 
@ Network Printing 
© Printing to a network printer 
= Print a file - nprint 
= Send output to the printer - Capture 
= Returning to the local printer 
@ Network Communications 
=> Using whoami. 
=> Viewing users 
œ Sending and Receiving messages 
>. Rejecting messages 
= Console commands 
@ Electronic Mail 
æ Groupware 


2.O0Introduction 


The ‘computer stores files in directories that are arranged in a tree-like 
structure. A network uses a very similar scheme. Since a network has 
much more storage capacity, it requires that data is more organised. In 
this chapter, we will understand and use the Novell NetWare File 
system. We'll discuss the different kinds of NetWare directories, and 
then you'll learn how to move and copy files among these directories by 
using various NetWare commands. 


ee 
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A great advantage of using networks is that many users can share 
resources such as disks and printers. In this chapter we'll learn about 
printing in a NetWare environment, what happens when the user prints 
to a printer that is directly connected to the workstation and how to 
print a file to a network printer. We will also learn how to redirect 
printer output and how to return to local printing. 


Another wonderful benefit of being on a computer network is that it 
makes all kinds of communication possible. This chapter also covers 
how to get information about user names and which other users are 
using the network, how the user can send , receive and reject messages 
over the network. 


Lastly we will take a look of the much discussed topics of today - 
Electronic Mail and Groupware. 


2.1 Network Directories 


Files and Directories are stored on a personal computer. These 
directories can also contain other directories. Networks are essentially 
arranged the same way. Being a larger and more complex system than a 
stand-alone personal computer, a network needs a bit more order. 
Therefore, network storage is first divided into volumes (discussed later), 


with each volume having its own directory structure. Directories are . 


needed because it is inconvenient to store all of the files on a PC ina 
single directory - this results in directories with too many files to 
manage. 


When a disk is freshly formatted, it has a single directory called the root 
directory, represented by a backslash (‘\’). The root directory can be 
divided into directories, each of which can have a name which is 8 
characters long followed by a 3-character extension. 


2.2 Types of NetWare Directories 


` On a network, different types of directories serve different purposes. For 
example the HOME directory is a private data directory for the user. 
Other users do not have rights to view or access data present there 
(except the administrator). 


Several system-generated directories are created when the 


administrator installs NetWare. These directories contain the NetWare 
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commands and programs (such as LOGIN and LOGOUT), as well as 
important system files. Some of the system-generated directories which 
could be seen are LOGIN, PUBLIC SYSTEM and MAIL. 


Network directories fall into one of the following four categories : 
© Operating-system directories 


These contain the workstation and operating systems for the 
various nodes on the network. 


© Application directories 


These contain network versions of application programs. This allows 
many users to share programs (such as Microsoft Word, or Excel 
etc.) 


© ‘Shared data directories 


These ‘contain data to which various users must have access. This 
kind of directory provides one of the chief benefits of using a 
network. Instead of making copies of files (softcopies) and 
hardcopies, users can share access to data that is stored in one 
central location. 


@ Private Data Directories 


Only specific users have access to these directories. 


2.3 NetWare Volumes ~ 


Volumes are to NetWare what drive letters (e.g. B:, C: etc.) are to DOS. 
In a DOS directory tree, the highest level the user can access is the root 
directory of the drive. Similarily a NetWare volume is the highest level a 
user can access and has a root directory as well. 


NetWare volumes are created in order to organise files on the disk ‘so 
that they can be easily accessed. ; 


Volumes are usually large and need to be logically subdivided. Like 
DOS, NetWare enables volume space to be divided into directories, 
which may in turn be divided into subdirectories. 
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A well thought-out directory structure can greatly simplify management 
of the server's file storage. 


2.4NetWare’s Directory Structure 


Directory structure is the system used to organise all network files ona 
file server’s hard disk. Each file has a filename and is stored at a specific 
location in a hierarchical filing system so that files can be located 
quickly and conveniently. The levels of this file system begin with the 
file server hard disks, divided into one or more 


@ Volumes divided into 

@ Directories, divided into 

@ Subdirectories, which contain 

@ Files (or other subdirectories) 

Basically directories are arranged in a tree-like structure. Directories 
that contain other directories are considered to be higher in the 
“hierarchy” than those they contain. 

Each directory /subdirectory is names when it is created. Because each 


level has aname, the location of any file can be pinpointed by listing the 
directory name at each level of the directory structure. 


The list of levels constitutes both the directory path and the full name of: 


the directory. Figure 2.1 illustrates a typical Network directory 


Pe 
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Figure 2.1 - NetWare Directory Structure 


Following is an example where the components of a full directory 
“are illustrated : 


Although DOS recognises only the backslash (\) for separating the 
levels in a directory structure, NetWare recognises either a forward 
slash (/) or a backslash. The volume name and the root directory (the 
directory next to the volume) must be separated by a colon (°). 


2.4.1 Basic Directory Structure 


When the SYS volume is created, a Directory table is automatically 
created. The table contains four predefined directories. 


n en TNT SEL ER TCP en 
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They are : > 
© SYS:SYSTEM 


This directory is for system administration and contains operating 
„system files, NetWare utilities, -and programs reserved for the 
SUPERVISOR. 

SYS:PUBLIC 


It is for general access and contains NetWare utilities and programs 
for regular network users. 


SYS:LOGIN 
This directory contains the programs necessary for logging in. 


SYS:MAIL 


This directory is used by NetWare-compatible mail programs. This 
directory also contains an ID number and subdirectory for each 
user where the user login script and print job configurations are 
stored. 
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2.5 File and Djrectory Commands 


Virtually all DOS directory and file commands can be used to manage 
NetWare directories and files. Directories can be. created using MD, 
changed with CD and removed by using RD commands. Almost no 


learning is required by a DOS user to start using NetWare volumes and 
directories. 


The local operating system commands such as CD or DIR can be also 
used on the network. But, NetWare also provides its own commands 
that can be used as well. The commands that are useful in managing 
files and directories are NDIR, LISTDIR and NCOPY. 


© NDIR command 


Purpose 


NDIR is similar to the DOS DIR command. It is used to view 
contents of a NetWare directory. NDIR comes along with various 
options that allow the user to view particular directory information. 
NDIR displays information which includes file names, file size, Last 
updated (the last time the file was modified), Flags (attributes), and 
Owner (who created the file). The subdirectory name, Inherited and 
Effective rights, Owner and when it was created or copied is also 
displayed. Finally, the user is shown how many files NDIR found 
` and how much space was taken up by the files. 


Syntax 
ndir path/options 


Path:can be replaced by a directory path, wildcards, or upto 16 file 
names. i i 


>. Sort Parameters 


Sort Parameters alter the order in which files and subdirectories 
displayed to the user. ; 


i 


eee 
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V /SORT (parameter) - Enables the user to sort the directory on 
selected parameters by using the 
parameters described in the following 
table. The parameter that the user 
specifies is substituted into the 
parameter variable after the SORT option 


is typed. 
vV /REV /SORT Reverses SORT according to the 
(parameter) parameters specified. 
y JUN Leaves the list unsorted. 


> Parameters 


A complete list of parameters for the NDIR command is shown in 
the following table. These parameters can be used to gather specific 
information about files and subdirectories. 


E 


ON 


| Created Date -_ _ ~. |: 
| LastAccessed Date | 


ESNS 
[ACRE 5] 
SOARS 


Examples 
=> NDIR/SORT /OW 


t 


Will sort the output of the NDIR command in the ascending . 
order of owner names. 4 


=> NDIR/REV/SORT /SI 


Will sort the directory contents in the reverse order of file sizes. 
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> Display Formats 


NDIR displays whatever the user requests. The switches described 
in the following table describe specific conditions that can be met 
using NDIR. : 


ays all directory names (“Directory Only’). 
isplays only file names (“File Only”). 


and created dates. 
Lists inherited and effective rights 
Lists NDIR options f 


Examples 
> NDIR/DO . 
Displays only directory names. 
> NDIR/RIGHTS 
Displays the inherited and the effective rights. 
=> NDIR/SUB 


Displays the contents of the current directory and all its 
subdirectories. 


> Attribute Searches “° 


ser needs to look for files: with specific attributes, the 
gileeing list shows each switch and the attribute it represents. 
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Search Limitation 
ee needed 


pelts Inhibit 
Hidden. 


sname i Inhibit 


F ES ct F 
ERI 


no 


r 


Note : The /NOT option can be placed before the attribute to display 
files not having the specified attribute. 
Examples 
> NDIR/A 
Displays file names who have the attribute A. 
> NDIR/NOT /Ci 


Displays file names whose Copy Inhibit attribute is not turned 
on. 


> Restricted Displays 


NDIR enables the user to restrict displays according to specified 
conditions. The following table illustrated the conditions that can 
be specified. 
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—— 
T or directories created by the user’s 
name. 

/OW NOT EQ name Enables the user to search for file 
AE and directory owners that are not 

the user name specified. 
[SI operator nnn Finds ‘all files of a certain size. The 
nnn parameter specifies the number 

` | of bytes of a file. 


/SI NOT operator nnn Finds all files that do not fall into the 


category of the requested 
information. 


lr 
or on a certain date 
, 
before, after or on a certain date. 
a = 
on a certain date. 
after or on a certain date. 5 
or on a particular date. 


/AC NOT operator mm-dd-yy | Finds all files that have not been 
accessed before, after or on a 
particular date. 


` JAR operator mm-dd-yy Finds all files that have not been 
archived before, after or on a 
particular date. 


> Operators 


The operators used to connect parameters to form specify conditions for 
NDIR to search are listed below. ' 


: ; 
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Examples 
> NDIR /OW EQ JOHN 
Displays only those file/directory names created by John. 
> NDIR/SI GR 300 
Displays those file names whose size is greater than 300. 
> NDIR/CRAFT 05-05-95 


Displays all file names which have been created before 5th 
May 95. : | 


=> NDIR/AC NOT BEF 04-15-95 | 


Displays all file names which have been accessed after 15th - | 
April ‘95. 


r `. 
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© LISTDIR command 
- Purpose : 
The LISTDIR command is similar to the DOS Tree command. Each 
subsequent subdirectory is indented to see the hierarchy. 
Syntax | 
LISTDIR path option 


where path - the directory path for which the user-wants more 
information. The path can include the volume, 
directory and subdirectory. 

Options ; - 


LISTDIR also can use several command-line switches. The switches 
available are listed in the following table. 


Lists the inherited rights mask of 

all subdirectories in a specific 
directory. é fis 
Lists effective rights for all 
subdirectories of the specified 
directory. 

Lists date or time or both hat a 


/?ALL or /?A | Lists all subdirectories, their 
Inherited Rights Mask, effective 
rights and their creation dates 
and times. 


Examples 
=> LISTDIRTEMP/R 1 + 
Displays the inherited rights of all subdirectories under the 
directory TEMP. . x 


41 Working with NOS 


CC-0. Bhagavad Ramanuyja National Research Institute, Melukote Collection. 


Funding:. Tattva Heritage Foundation,Kolkata. Digitization: eGangotri. 


> LISTDIRTEMP /S 
Displays the subdirectories of the directory TEMP. 
> LISTDIRTEMP /E 


Displays the effective rights of all subdirectories under the 
directory TEMP. 


© NCOPY command 


Purpose 


This commands works like the DOS COPY command. It allows the 
user to copy files across network directories. The advantage of using 
NCOPY over COPY is that NCOPY copies all special attributes that 
the’: files may have ie. the NCOPY command automatically 
preserves File Attributes. 


Syntax 


NCOPY path <filename> TO path <filename> option 
Options 


Description 


Copies only files that have the ARCHIVE 
attribute turned on. 

Copies only files that have the ARCHIVE 
attribute turned on, and turns the attribute off 
of the source file) after the file is copied. 

/¢ Copies files, but does not copy the file attribute 
settings. (except Rw & A which are the default 
attributes). 

Copies the entire file directory structure. Does 
not copy empty directories. 


Copies the entire subdirectory SES 
including empty directories. 


D 


plays help fomio 
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Examples 
> NCOPY LETTER.DOC C:\DOS 
Copies a file LETTER.DOC to the C:\DOS directory. 
> NCOPY*.* C:\TEMP /A 


Copies only those files which have the archive attribute turned 
on from the current directory to the directory TEMP. 


> NCOPY C:\BACKUP1 C:\BACKUP2 /S 


Copies the entire directory structure of the directory BACKUP1 
to the directory BACKUP2. 


Following are some advantages of the NCOPY command over the 
COPY command of DOS: 


‘ © NCOPY understands NetWare path names, which can include 
server names and volumes in addition to directories and files. 
For example, the following command copies files to a new 
volume on a new server, something that is more difficult to do. 
with a COPY or XCOPY. 


NCOPY SI/SYS:APPS\WORDPER\*.* FS2/APPS:WORDPER 


© A second eiivantese of NCOPY is that it is faster than the DOS 
commands in most situations. NCOPY is NetWare-aware and 
can choose better ways of copying network files than non 
NetWare commands. 


© A third advantage of NCOPY is that it copies NetWare attributes 


or the files and directories that it duplicates. Neither COPY nor 
. XCOPY retain NetWare file attributes. 


© MAP command 


Purpose 


NetWare uses letters to identify various locations within the 
network’s-directory structure. : 


eee 
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tWare world, these letters are called as drive pointers. 
See ea (as in DOS), NetWare drive 


Rather than indicating physical disks OS j 
pointers act as a kind of shorthand for specifying any location 


within the directory structure. 


A mapped network drive serves the same purpose as a bookmark; it 
allows the user direct access to a particular location. 


The MAP command is used to create and view the drive pointers. 
These drive pointers are also sometimes referred to as mappings. 


For example to use network drive letter G to point to the directory 
SYS:PROJECT/PLANS on the file server ORACLE,. the. following 
command can be used : 


MAP G:=ORACLE/SYS: PROJECT/PLANS 
When drives are mapped changing from one directory to another is 
quick and convenient. Rather than having to specify the entire 
directory path again, the user can simply enter the drive letter 
followed by a colon. ‘ 
For example, to change to the directory mapped above, type 
C:|> G: 
The DOS prompt would then be displayed as follows : . 
G:\PROJECT\PLANS> 
Note : Th: volume name is omitted in the display. 


The drive remains mapped. until the user logs out. If permanent 
drive mappings are required, the MAP command should be included 
in the login script. 


Drive maps thus are used so that the user can easily access the 
files on the file server. Drive maps also make it easy to run network 


programs by extending the DOS search path so it can look for 
programs on the server as well. 


Another kind of mapping is called a search drive mapping. 
Collectively, the search drive mappings act like the DOS PATH 
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command, instructing NetWare (and DOS) where to look for the 
command the user has typed 


The MAP command thus is an essential command in NetWare. It is 


an essential tool for setting up, managing and removing duve 
mappings. 


Syntax 


The current drive mapping can be viewed by simply typing 
command : 


MAP 


NetWare shows two lists first the drive pointers and then the search 
mappings. 


The MAP command can also be used to assign drive pointers and 
search mappings. 


To do so, the syntax of the MAP command is 
map drive_letter := path 


It is important to be aware of the existing mappings when others 
are created. If a drive letter is chosen that has already been 
mapped, the new mapping simple replaces the old one. 


The drive letter used with the MAP command can be any letter of 
the alphabet, although A: through E: are usually reserved for local 
floppy and hard drives. j 


The path can be any properly constructed directory path name. The 
user can always use a full path name, etang with the server 
name. For example : Bi 


MAP M:=FS 1/SYS:PUBLIC 


The user can simplify the path considerably. As with DOS, at any 
given time there will always be a default server and a default 
directory on a default NetWare volume. ; 


If the user is logged into only one server, the server name can be 
omitted from the päth. 
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For example : 
MAP M:= SYS:PUBLIC 


If the default volume is the one which has to be used then the 
command would be : 


MAP M:= \PUBLIC 


Using Mapped Drives 


Once the drive letter has been mapped, the user can use the drive 
letter as though it were a local drive. 


For example : 


MAP M: = SYS:PUBLIC 
DIR M: 


What the user will see are files from the \PUBLIC directory 


One way of using an application is to map a drive to the application 
directory, and then change to the mapped logical drive to run the 
application. 


For example if Lotus 1-2-3 is in the directory SYS:LOTUS\123 then 
the application can be loaded like this : 


MAP L:= SYS:LOTUS\123 
L: 
123 

Any DOS command can be used with a mapped drive. DOS 
assumes that the drive is local. The DOS requester ensures that 
request for network files go to the server and requests for local files 
go to DOS. This entire process is transparent to the user. 


Displaying Current Drive Mappings 


As mentioned earlier, if the user just types MAP, a list of current 
mappings is displayed. 
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The list for example could look as follows : 


Drive A: maps to a local disk 

Drive B: maps to a local disk 

Drive C: maps to a local disk 

Drive D: maps to a local disk 

Drive E: maps to a local disk 

Drive F: NRP\SYS: \LOGIN 

Drive E: NRP\SYS: \USERS\OHARDY 


Searchl: =Z:. [NRP\SYS: \PUBLIC] 
Search2: =Y:. [NRP\SYS: \] 
Search3: =C:\WINDOWS 
Search4: =C:\DOS 
The above listing has three different sections : 

Y The drive letters for any local disks. 

V The conventional drive mappings. (This user has two such 
mappings : F: is mapped to SYS:LOGIN and H: is mapped 
to the user’s home directory). 


V The four SEARCH drives. (covered later in this chapter). - 


> Mapping to the next available drive letter 
There are several mapping short-cuts. If the user wants to map a 
network directory to a drive letter and does not care what letter is 
used, he can simply type the command : . 
MAP NEXT SYS:APPS\LOTUS\123 
will start from the first network drive letter (usually F:) and 
Roe the end of the alphabet until it finds a drive letter 
that is unassigned. This drive letter will be used to map the 
specified directory. 
> Re-using Drive Mappings 
i i d has reused it in 
If th user has assigned a drive map to a letter an 3 
EUS drive, the drive letter will be reassigned. In this case, the 
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following dialogue takes place when an attempt is made to remap a 
local drive. The bold face text is typed by the user : 


MAP D :=SYS:PUBLIC 
Drive D is in use by a local drive 
Do you want to assign it as a network drive ? 


If the user responds with Y, the local drive letter will be remapped 
as a network drive letter. This precaution is necessary because 
mapping to a local drive letter makes the local drive inaccessible. 


Deleting Drive Mappings 


The user will often need to delete drive mappings since only about 
20 drive letters are available after the local drives and the essential 
search drives are assigned. The DEL and the REM options of MAP 
accomplish the same thing. 


Example : 


MAP DEL L: 
MAP REM M: 


Using Search Drives 


A search drive is automatically searched by the operating system 
when a requested file is not found in the current (default) directory. 
The operating system checks the search drives for executable files 
or data files accessed by the executable files. In short, a search 
drive allows the user working in one directory to access an 
application that is located in another directory. 


As we know that the Dos PATH command can be used to simplify 
the process of running programs. NetWare drives are usually much 
ee and rahi eae than local drives, and it is even more 

to be e to use the PATH command running 
programs on NetWare servers. E 


In fact, NetWare makes it easy to use the PATH command with 


NetWare drives. The technique involves search drives, which are 


created with the MAP command. 
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Let us try an experiment : Log out of the network and type PATH. A 
standard DOS path will may look like this : ` 


PATH=C:\DOS;C:\WINDOWS;C:\WINWORD 


The directories in the PATH command may not match but the 
structure of the PATH command is clear. 


Now, log into the network and type PATH again. This time the PATH 
command contains some new drive entries similar to these : 


PATH=Z:\.;Y:\;X:\;C:\DOS;C:\WINDOWS;C:\WINWORD 


The user may probably wonder where Z:\.:Y:\;X:\ came from. These 
are the NetWare drive mappings that have been added to the path. 
These are the search drives. 


Note : When NetWare stores a drive letter in the PATH command, it 
uses the notation letter:\. for the drive. The “period” is for the 
default directory. Therefore in the above PATH command, the entry 
Z:\. simply means that the current default directory for drive Z: is 
in the search path. 


There is one essential search drive which points to SYS:PUBLIC and 


which is usually drive Z:. This search drive makes it possible fir the 
user to execute utilities that are stored in the \PUBLIC directory. 


> Mapping Search Drives 


NetWare supports 16 network search drives, which are lettered 
backwards. The first search drive is thus Z:., the second will be Y:, 
so on and so forth. 


Now let us examine how search drives can be created and managed. 


: The MAP command for a search drive is similar to the command for 
mapping a regular network drive. ; Sr 


Example : 
MAP S1:= SYS:PUBLIC ' 
TT WT NOS. 
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The user does not have to specify the drive letter for a search drive 
since MAP picks up an available drive letter. 


The above command maps a drive letter to.SYS:PUBLIC and then 
places the drive letter in the first position of the users PATH 
variable. 


Previously we saw a MAP listing that included search drives. This is . 


a good time to revise that listing : law 


Drive A: maps to a local disk 

Drive B: maps to a local disk 

Drive C: maps to a local disk 

Drive D: maps to a local disk 

Drive E:. maps toa local disk 

Drive F: NRP\SYS: - \LOGIN 

Drive E: NRP\SYS: \USERS\OHARDY 


Search]: =Z:.[NRP\SYS: \PUBLIC] 
Search2: =Y:.[NRP\SYS: \] 
Search3: =C:\WINDOWS 

Search4: =C:\DOS 


As search drives can be created, they can also be added replaced, 
deleted and inserted. The following table illustrates the various 


functions that can be performed with search drives : 


Search drives to the end of | MAP S$16:=SYS:SYSTEM 


MAP DEL S2: i 
MAP INS S1:= SYS:APPS\ 123 
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2.6 Network Printing 


great of usi networks is that many users can share 
5 eS ieee aerate modems. Perhaps the most commonly 
shared devices are printers. A large company can buy just a few 
printers, and all users can share access to them. This also has the 
advantage of allowing individuals users to use different printers for 
different tasks. For example, the user might want to print notes on a 
dot-matrix printer, but print a report on a laser printer. 


inting i i ifferent from printing to a personal: 
Network Printing is considerably differen: 
printer. This is because the printer is not connected to the workstation 
by a parallel printer cable, and hence signals such as “busy”, “paper 
out” are not available on the PC. 


Figure 2.2 illustrates stand-alone printing, while Figure 2.3 illustrates 
network printing. 
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Figure 2.2 Stand-alone Printing 


Server -` -Pri 


nt Server 
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printer, and there must be an orderly mechanism for ensuring that all 
the jobs are printed efficiently. 


Another reason is that several users are competing to use the same 


2.6.1 Printing to a Network Printer 


The user can either print using a local printer (i.e. the printer attached 
to his workstation) or using a network printer. When the user prints an 
application to a network printer, the application sends its output to a 
network file that is stored in a special directory on the file server. This: 
directory serves. as the Print Queue. The problem of dealing with 
multiple users is managed by using ptint queues. 


The print job remains in the queue until the Print Server (Print servers 
are nothing but workstations to which printers are connected. This 
workstation functions as a Print Server) is ready to handle it. It is the 
responsibility of the print server to ensure that jobs are printed from: 
queues in an orderly manner, in accordance with the priorities set up by 
the network administrator. Print Servers take the print jobs from the 
print queue and send them to the network printer. 


Shared Printing thus, involves the following steps : 
cr Redirecting printer output - 


Usually, print jobs consist of output from ‘programs such. as word 
processors, spreadsheets, databases, graphics „packages etc. These 
programs are generally not aware of network printing; they only send 
requests to a printer port on a local PC. 


ho wishes to use a network printer needs to execute a NetWare 
pee ° lled CAPTURE. This command tells the NetWare shell 
(NetWare software which is loaded into the memory of each workstation 
which enables the workstation to communicate wit. the file server) _ 
residing on the workstation to capture the print job that would normally 
go to a local printer and send it to the network printer selected. 
(Operation of this command is explained later). 


In addition to output redirection NetWare enables. a user to control a 
printer in certain ways. For example, a department uses a shared laser 
printer that is capable of printing vertically or horizontally, and a user 
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ives a print command in the landscape (horizontal) mode. At the end of 
tie print job, if the user does not reset the printer, the next print job 
will also be in the landscape mode. This possibility can be eliminated by 
configuring NetWare to send a reset command to the printer before 


every print job. 


@ Waiting in a print queue 


When the NetWare shell redirects a print job, it must have some place to 
send it. It cannot safely send the print request directly to the printer 
itself, because the printer may be busy with another user's job, or off- 
line. Instead, a job is sent to a print queue. A print queue is a holding 
area on a file server disk where print queues are stored. The print 
requests wait in line for the printer to become available. 


When requests are redirected, they are routed to the file server on which 
the print queue resides. As the output from a workstation is received, it 
is converted to a file on the server disk. When the print job from the 
workstation is completed, the file is closed and takes its place in line in 
the queue. If no job is in the queue ahead of it, the file is sent to the 


NetWare provides a wide variety of queue-management and 
configuration options. Jobs that are waiting in the queue to be printed 
can be moved up in the line, deleted, restarted etc. If a job is lengthy, 
then a user can specify that it be held in the queue until a certain time, 
so that the job can be printed in a slack period. 


@ Moving from the queue to the printer 


This is the last stage a request passes through before being actuall 

printed. In most cases, this movement involves going from the neey 
disk to a printer attached to the server's port. NetWare provides certain 
options to control this movement. For example, more than one printer 
can be configured to accept jobs from the same queue. Another 
configuration is having multiple queues for the same printer. Each of 


these queues can have separate configuration options : 
aa fs ptions and may be used 


One of the queues can be made a high priority queue, so that its jobs 
are always serviced first, as soon as the Printer becomes available, sis 
ifjobs from the other queue may have been waiting for a longer time. 
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2.6.2 Printing a File - NPRINT 


Purpose 


Sends a file from the disk to a NetWare print queue. The NPRINT 
command is the NetWare substitute for the Dos PRINT command. 


Syntax 

NPRINT path /option1 /option2 .... 

where path is the full path including the name of the file to be printed. 
Option1 and Option2 are the various command options the user may 


choose. 


Options 


Examples 
> nprint myfile.txt / q=myprintq 
Prints file myfile.txt from current directory to queue “myprintq’. 
> nprint myfile.txt /s=myserver /q=myprintq 


Prints file myfile.txt from current directory to queue “myprintq” on 

server “myserver”. 

> nprint myfile.txt/c=2 

Prints 2 copies of file myfile.txt to default queue and server 
— ate eNOS 
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2.6.3 Sending the printer output to a printer - CAPTURE 


Purpose 


The CAPTURE command is used to tell the computer to send output to a 
network print queue. 


Syntax 
capture /option!, /option2 ... 


The options of the capture command are the same as the nprint 
command with the following additions : 


Options 


/sh - This option is used to display the current capture settings. This 
tells you whether any of the ports currently have their output 
redirected to the network print queue. 

/L- It is used to specify which port’s output the user wants to 

redirect. If this option is ignored, Capture will assume that the 
port is LPT1. 


a 


Examples 


> Ifthe user wants the output to go to LPT1 and the queue 
MYQUEUE the command is: 


capture /q=queue 


> ifthe user wants to redirect the output to a different port, it will 


have to be specified explicitly. For example. to d th 2 
output to MYQUEUE, thecommandis: a the LPT 


‘ 


capture /1=2 /q=myqueue 
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The main difference between CAPTURE and NPRINT commands is that 
with CAPTURE the file to be printed does not have to be specified. This 
is because Capture does not actually print anything, rather it tells the 
computer where and how the jobs should be printed. ; 

2.6.4 Returning to local printing - ENDCAP 

Purpose : 

If the workstation has a local printer hooked and the user may want to 
switch back and forth between printing to the network and printing to 
the local printer. As long as the Capture command is in effect for a port 


(to which the printer is connected) . the user will not be able to use the 
local printer. 


Syntax 

The command used to stop redirecting a port’s output is : 
ENDCAP /option 

© The T option can be used fo end capturing to a particular port. 


© To end capturing for all ports, the ALL option can be used. 


Examples 


If the port LPT2 F captured to the network queue called MYQUEUE, the 
LPT2 can be returned to the local mode with the command : 


> ENDCAP /1=2 
>. ENDCAP/all - Ends capturing all ports. 
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2.7 Network Communications 


In the before Networks era, getting a simple answer to a simple question 
used to be a most frustrating matter. For example a worker would call 
his co-worker to leave a message to call back, the co-worker would call 
back and leave a message again (since, the person was not in his place) 
and so on. Or maybe, a person would walk down the hall and take the 


elevator a few floors up or down only to find out that the person he was. 


looking out for is not there. 


Hence, one of the most important benefit of being on a computer 
network is that it makes all kinds of communication possible. NetWare 
has some built-in communication abilities to achieve.this. 


NetWare also provides an environment in which electronic mail and 
Groupware software can run. 


2.7.1 Using the WHOAMI command 


One of the best things about computer networks is the ability to send 
messages to other network users. NetWare has some built-in 
capabilities to send messages. But, to use these, however, the user 


needs to know about other users’ names and whether th di 
to the network. Taea 
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The WHOAMI command is used to instruct NetWare to display the user 
name, name of the server to which the user has logged in, connection 
number and the version of NetWare which is being used. 


‘ 
1 


Purpose 


Displays connection, identification, and security information for the 
current user. : nai z s Sae to 


Syntax 

Whoami [servername] option 

Options 

If WHOAMI is: typed and it does sant include any parameters, the: user 


name, server name and the workstation connection is received, NetWare 
version and login time. 


servername Unless a file server is specified, information is 
provides for all attached server. spi 
/ALL =: -_,. ©» Displays group membership and security .. 
equivalence along with the basic WHOAMI 
information. 
/G Displays group information along with the basic. 
` WHOAMI information. i i 
[W ; Displays workgroup manager information along. 


with the basic WHOAMI information. 
Note that only one EA ata time can be entered along with WHOAMI. 
` Examples 
> WHOAMI | 
(displays the cutout 

Yon are a NEN E 11 (250 user) 

Login Time : Wednesday May.3, 1995 10:48 a.m. 
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> WHOAMI /G 
(displays the output) 
You are Eric attached to server 8. 
Server TDC is running NetWare 3.11 (250 user) 
Login Time: Wednesday May 3, 1995 10:48 a.m. 


You are a member of the following group : 
EVERYONE 


2.7.2 Viewing Users - USERLIST 


Purpose 


If a message has to be sent to another'user, there are two things that 
should be known : : ; 


e The user’s name 


© Whether the user has currently logged in. 


Displays a list of logged in users ad some status information for those 


users. ge 

Syntax 

USERLIST 

au | 
<userspec> '. An optional file server specification followed by a 

bs user:name for which the status is requested. 
/A . __Displays network address information with the: 
. user list display. 3 
/c 2 Displays a tn list without pausing x the 


end of each screen page for long lists. 
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Examples 
> USERLIST /C 


Connection Number Username Login Time 


1 Eric 10:48 a.m. 
*2 Margo 11:00 a.m. 
3 Jake 10:00 a.m. 


= USERLIST Eric 


Connection Number Username Login Time’ 
1 Eric 10:48 a.m. 


2.7.3 Sending and Receiving Messages, - SEND 
Purpose 


d short messages to a user, group, or several users or 
npe Abed user uses the SEND command, a confirmation 
message listing is displayed listing the users who did and did not 
receive the message. When a message appears on. the workstation, all 
processing on that workstation is halted. This does not affect most . 
programs. After the user removes the message from the screen (by 
pressing (Ctrl-Enter), the local application resumes any processing. 


Syntax ; 

SEND “message_text” to destination 

Options ; 

messagetext Specifies the message, which can be a maximum 


of 45 characters minus the length of the sending” 
user’s name. 


=~ 


estinati -Ses the user or group that will receive the ~~ 
4 aes Sse Using any of the following formats, the 


ariable can designate users, groups, file server 
Sais specific workstations or all workstations. 
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The following are valid descriptions for destination : 


to one or 
list Enables the user to send messages 
pee several users. Multiple users are separated by 


commas. 


GROUP grouplist Enables the user to send messages to one or 
; several groups. Multiple users are separated 
by commas. : f 


servername /CONSOLE Enables the user send messages to the file 
server console. The optional servername 
variable specifies the file server. CONSOLE 
specified the file server console. 


servername/EVERYBODY Enables the user to send messages to all 
i workstations. The optional servername 
specifies a file server. EVERYBODY specifies | 
all WORKSTATIONS. 


STATION servername Enables the user to send messages to specific 

/stationlist workstations. The STATION specifier is 
optional. The following variables are optional : 
servername - defaults to the current server 
Stationlist - consists of a station number. _ 
Additional station numbers are separated by 
commas. : 


When a message is sent, the recipient (as long as he/she is logged in) 
will see a small message box on the screen displaying the message, 


where it came from and how it can be cleared. To clear a message on the - 


screen, the Ctrl-Enter key combination has to be used. 
Examples 


: > SEND “Remember - Staff meeting at 4:00” to GROUP STAFF 


Sends a note to all members of the group STAF :00 
Sete group F about the 4: 
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> SEND “Pls. mount form 2 in printer 3 “ to CONSOLE 


Sends a note to the file server console to request the console . 
operator mount form 2 into printer 3 on the file server. 


> SEND “How about dinner tonight at 8:00” to Jessica 
Sends a personal note to user JESSICA. 
2.7.4 Rejecting Messages - CASTOFF 


When a station receives a broadcast message, all activity on the station 
freezes until the user presses Ctrl+Enter. If the user is running a 
lengthy database report, the user may not want the database program to - 
freeze midway. In such cases, it is desirable to disable the reception of 
messages. Thus, the CASTOFF command prevents messages from being 
received by a station. ; £ 


Purpose 


Prevents messages sent from the file server console or other 
workstations reaching a station. This avoids unattended operations (like 
printing or compiling) from being interrupted. ‘ 


Syntax 


CASTOFF — 
or 
CASTOFF ALL 


Options 


Blocks the message from both the file server 
“ie Seriscle and other workstatiohs on the network. 


2.7.5 Accepting messages - CASTON 


Purpose ee | | | 
Enables the workstation to resume receiving messages if the user has 
used CASTOFF utility to block incoming messages. 
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2.8 NetWare Console Commands 


` 


The file server is also called as a console. A dedicated file server acts 
only as a console where as a non-dedicated file server will act both as a 
console and as a workstation. The console is used for monitoring the 
users on the network and also to perform certain important tasks to 
manage the network. A colon (:) is used to represent the a console 
prompt. : 

A set of commands which can be executed at this prompt are called as 


Console commands. Following are some commonly used console 
commands : - ; 5 
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© BROADCAST 
Purpose 


Sends a message to all users logged in or attached to the file 
server. 


Syntax 
BROADCAST “message” To username 
Options 

username The user’s login name 


connection number The connection number displayed by the». 
ii i _! + userlist command.” 


Pa 


Press Space Enter a space on the same line of the 
command to specify another user name or 
connection number. Place the space between 
user names or connection numbers. 


The message'can be upto 55 characters long. If the username or the 
connection number is not specified, the message is sent to all the users 
connected to the‘network. If a particular user has issued a CASTOFF 
ALL command, he does not receive the message. ` ~ ; 


Examples 
> BROADCAST Meeting in room 1A in 10 minutes 


Note : The user need not enclose the message in quotation marks 
when a message is being sent to all the users. 


iin 1A in 10 minutes” to Tim, Jane, 
> BROADCAST “Meeting amen Jacob and 6 


© CLEAR MESSAGE 


Purpose 
er’s display when 
at the bottom of the file server 
Clears the message ator mad! 


eri ing the 
the user is using = Wodkine with NOS 
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Syntax 
CLEAR MESSAGE 
Options 


None 


© CLEAR STATION 


Purpose 


Removes all file server resources from the specified workstation, 
and breaks the link between the file server and the workstation. 


Syntax 
CLEAR STATION station_number 
Options 


_ None 


When the CLEAR STATION command is invoked, all the 


workstations’ open files are closed and the communication link to 
the file server is broken. 


e DISABLE LOGIN 
Purpose 
Prevents users from logging in to the file server. 
DISABLE LOGIN pce mans - 
Options 
None 
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The DISABLE LOGIN command does not affect users who are 
_ already are logged in to the file.server. It only prevents a user from 
'* logging in after the command is issued at the file server console. 


After the command DISABLE LOGIN is used the message “ Login is 
now disabled”. This confirms that the command has worked... : 


Similarly after the DISABLE LOGIN command is used, ENABLE 


LOGIN command can be used to enable system’s users to log in to` 
the server. 


© DOWN. 
Purpose 
'The DOWN command shuts down the NetWare operating system so 
that the user can safely turn off the file server. When. the DOWN 
command is issued the following things occur : : 
V All cache buffers are written to the disk 
vV All open files are closed © 


v- All directory and file allocation tables are updated. BS 


. "ee 
wens f . TES on 


@ EXIT 


Purpose 


eturns File Server console to DOS after the down comman 
partition, or to reload server with new parameters. 


i 
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execu be enclosed in 
te a DOS command, the command can be 

apna aks after EXIT. For example the following command 
leaves the login script and loads WORDSTAR. 


4 


EXIT “WS” 


OFF 
Purpose 


Clears the file server console screen, similar to CLS in DOS. .. 


Syntax 


Enables the user to send short messages from the file server to 
specific users, all users or to workstations. 


Syntax 

SEND messagetext 

j j or + rrija . 

SEND messagetext to userlist ` - ES ETAR 

or i i 
SEND messagetext to stationlist 
messagetext ._ Specifies a message that can be upto 55 
characters in length ina 
userlist Specifies the user(s) who is to receive the 
message. Multiple users are separated by 
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stationlist Consists of a station number. Additional 
Station numbers are followed by. commas. 


A user must be logged in to receive a message from the console with the 


SEND command. If a user-list is not specified, the message is sent to all 
stations. 


Examples 
= SEND “Do not forget | Server shut down today at 5:00” 


This message will remind all logged in users that the system ` 
will be shut down for maintenance this afternoon at 5:00. 


> SEND “Stop sending junk messages to the console” TO Michael 
The message is sent from the console to the user Michael. 
> SEND “Please LOGOUT now!!!” to 14, 17 


The message is sent to workstations 14 and 17. 


-* = 


2.9 E-Mail 


command covered in the previous section provides a very 
Tre PND limited way to send messages to network users. Electronic 
Mail or E-Mail provides a more sophisticated network communications 
tool. E-Mail can be used to send large messages with files attached 
(such as spreadsheets or databases). — 


ic] be of various kinds: text, 
E-Mail is an electronic postal system. It can 
` voice or pictures. It ietie user send messages, SREE s mes just 
about anywhere over a LAN by dialing into a cent $ san 
log-in site and from there onto a global, enterprise-wide aeir a ee 
` global, enterprise-wide network then connects a divergent = 5 
and standalone machines with minicomputers and even mainfram 


| il) i the most common application used 
Electronic Mail (E-Mail) is probably s ) us 
on networks. ERa the growth of enterprise networks is often based 


on getting everyone in the organisation oa just so ety can, 
Mises e Working with NOS 
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share E-Mail. Access to the enterprise database and other resources 


often becomes an added benefit. 


The benefits of E-mail are obvious. Users can quickly communicate with 
one another. If a person, is not available to pick up a message 
immediately, the message is held in the E-Mail box until it can be 
picked up. E-Mail also provides a quick and easy way to package 
information such as sales reports, graphics, and other data transfer to 
another user. The user can simply attach information or even whole files 
to E-Mail messages. An often overlooked advantage of E-Mail is the user 
has time to organise his thoughts when replying to messages. 


The, major problem with E-Mail is that it is so easy to use that people 
can be overflowed with messages more than they can possibly answer in 
a day. In addition mail boxes require some management to dispose of 
messages or store those that may be required later. Senders do-not ` 
always know about the E-Mail backlog and often send redundant 


messages. 


Thus, Electronic Mail and messaging systems are an increasingly 
important part of an enterprise network’s computing strategy. The 
systems are designed to help users keep in contact and improve 
productivity. In addition, messaging systems are becoming an important 
tool for program development in distributed environments. A message 
may carry a request for service from a user to a remote database. The 
remote database then packages a response within a message and sends 
it back to the user. 


2.10 Groupware 


Groupware is a network software concept that defines applicati 

by a group of people. It is based on the assumptis, ee 
networks connect users, those users should be able to interact 
effectively, to. increase the productivity of the group ‘as a whole 
Electronic Mail is a good example of groupware. It lets users 
communicate with one another and co-ordinate activities, 


A true groupware package allows users on many different systems to 


‘interact and collaborate projects. Editing a file and then sending it to 


another user for review is not an example of groupware tralised 
network scheduling program that looks at the schedules of ewe 
people and then schedules meetings that fit into time slots “that all 
members of the group can attend is an excellent example of 
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network contribute elements such as graphics, text and spreadsheet 
information into a master document called a compound document. The 
elements in the compound document maintain a link to a file on the 
workstation of the person who created the ‘element. If that file is 
changed, the element linked to it in the compound document also 
changes. An artist, for example, could change the art in the compound 
document at any time by simply editing the file stored on his/her 
computer. The next time the marketing department opens the 
compound document, any changes made to the art file are automatically 
updated in the compound document. 


Elaborating further, a scheduling application could set up a meeting 
that takes place over the network. Attendees sit at their workstations 
and collaborate on a joint project by opening documents on the screen 
and working on those documents together. When a document is opened, 
it appears on the screen of all the attendees. Any changes made to the 
document also appear on everybody’s screens. 

A simultaneous conference call or videoconference session can help 
users co-ordinate their activities. z 

In fact, desktop videoconferencing systems that run under Microsoft 
Windows are available that let users view other users in one window 
while working on documents on other. windows. . 


Another interesting groupware concept involves the bulletin board and- 
interactive conferencing. ; 


© A bulletin board is a place to post messages that other users see 
- and can respond to. Company events and calendars are typically 
posted in the bulletin board area. People can just read messages or 
participate with messages of their own. 


‘ @ While bulletin boards are ‘typically ongoing message stations, an - 


interactive conference is a scheduled event that can be compared to 
a brainstorming session. A company might schedule a conference in 
. which all its employees can contribute their comments on company 
policies or the development of new products. Once again, people 
` can just watch as the messages scroll by or participate. The entire 
session can be saved and printed for future reference. Attendees 
can sign-in and sign-out without disrupting the conference. 


Once groupware applications are in place and the users begin to take 
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advantage of them, traditional methods of communicating are no longer 
used. Meetings become events that take place over days and in which 
attendees make contributions at their convenience using Electronic 
Mail. Electronic Mail messages become a preferred way of 
communicating with others, especially if other people are hard to 
contact. When users have the ability to attach a wide variety of 
information such as voice, graphics and video to electronic messages 
and deliver them instantly, even express mail becomes obsolete. 


Some of the advantages of groupware are as follows : 


@ Groupware simulates co-operation within an organisation and helps 
people communicate and collaborate on joint projects. 


© Groupware co-ordinates people and processes. 


© Groupware helps define the flow of documents and then defines the 
work that must be done to complete a project. 


© It provides a unique way for users to share information by building 
it into structured, compound documents. The document becomes 
the central place where shared information is stored. 


© Ideally, groupware should’ be able to help each person in a 
collaborative project to perform his or her specific job in a more 
efficient way. ay 


` 
i 
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In this Session we understood : 
Fo What are NetWare directories and their types. 
What are NetWare volumes. | 
The NetWare directory structure.- 


The various file and directory commands. 


How to communicate in a network, r = 


: 


h 
h 
fa 
'. FO The concept and process of Network Printing. 
fo 
fs 


What is E-Mail and Groupware. 


a a Te eT TE Ea OND 
B Working with NOS 
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Chapter 3 


NetWare Security and Utility Programs 


The objective of this session is to make you understand : 


Levels of NetWare security 
Defining Security levels 
Working with a password 
Users and Groups 
Understanding trustee rights 
Trustee rights for directories 
Trustee rights for files 
Viewing rights - RIGHTS 
Assigning trustee rights - GRANT 
Taking away rights - REVOKE 
How directory and file rights combine 
Inherited Rights Mask 
Effective Rights 
Setting IRM - ALLOW command 
@ File Attributes 
© | NetWare File Attributes 
© NetWare Directory Attributes 
© Displaying/Changing Attributes 
æ Taking care of Network data 
© Backing up data ; 
© Recovering erased files - salvage 
© Purging erased files - purge 
æ NetWare utility programs 
Syscon 
Filer 
Pconsole 
Session 
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3.0Introduction 


Network Security basically means protecting data and systems 
resources from access by unauthorised users. Why is this necessary ? 


Consider the following : 


e People outside the company might try to access network resources 
and data. 


© Upper management, middle management and other workers have 
different needs in terms of the information to which they have 
‘access. Network security can control the access given to various 
groups or individual users. For example, information about 
employee salaries and performance appraisals might be stored on 
anetwork; with access restricted only to a few users. 


@ People might accidentally move or erase important information. 
NetWare security allows the user to protect files and directories 


against such mishaps. 


@ Former employees who are fired other people might wish to harm 
your company in some way. 


In this chapter we shall cover one of the most important factors to be 
considered while working in a NetWare environment - SECURITY. While 
dealing with NetWare Security we shall also understand the concept of 
Rights, Effective Rights, Inherited Rights Mask and File Attributes. We. 
would also learn how the user can take care of his data present on the 
network and last but not the least we will-take a look at some commonly 
used NetWare Utility programs. These utility programs are menu-driven 
and help to administer the network more effectively. 


3.1 Levels of NetWare Security 
Security can be provided by using hardware, such as locks and keys for 


computers. But NetWare provides software solutions that 
_ effective. There are four general levels of NetWare security : Stes 
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Login Security 
It governs access to the network. The user’s login name and 5 
password uniquely identify him on the network. Based upon this, 
the administrator can grant the users certain rights. 


Rights Security 


' It determines what a user can do with a given directory or file. 


These rights can be specific to both a user and the directory or file 
i.e. the administrator could grant two user different rights to the 
same directory. 


Attributes Security 


It determines specific attributes of files or directories. Unlike 
directory rights, this type of security is independent of the user. 
That is, if a file has the Read Only attribute, no user can write over - 
the file, even if they have directory rights to write over files in the 
current directory. í 

Note : Attributes security overrides the rights security. 


File Server Security 


This includes locking the server console and blocking physical 
access to the server. "ape 


Bindery 


Bindery files contain all security information about users and 
groups on the system. Password requirements, station and time 
restrictions and security equivalences all are kept in these files. 
Bindery files are flagged as Hidden and System files residing in the 
SYS:SYSTEM directory. NetWare manages three bindery files viz. 
NET$OBJ.SYS, NET$PROP.SYS and NETS$VAL.SYS. The BINDFIX 
utility is designed to examine the bindery files and to mend defects. 


3.1.1 Defining Security Levels 
NetWare ancommodatcsl different types of users that can be on the 


i ith other types to fine-tune 
network. Many of these types combine with oth j 
what a user can do to the system. The following lists the different types 
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of users that can be on NetWare, ranging from the highest-level user to 
the lowest-level user : 

Supervisor 

Supervisor-equivalent users 

Workgroup Managers 


Account Managers © 


We ENES NES 


End Users 


The folowing figure illustrates the hierarchy of the network 
iministration. 


SUPERVISOR 


SUPERVISOR 


WORKGROUP 
ACCOU 


Figure 3.1 
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© Supervisor 


The user named Supervisor, who has rights to every utility and file 
on the network, is the highest-level network user. When NetWare is 
installed, the Supervisor user is automatically created and is given 
all the rights to the server. 


The supervisor can be viewed as having a backdoor into the 
network, meaning that he can get into the network in case of an 
emergency. An example of the supervisor’s high status is that a 
user can delete other users on the network but cannot delete the 
user named Supervisor. This does not, however, give the supervisor 
full rights to all files on the network. If, for example a file is marked 
Read Only, the supervisor cannot delete the file until the attribute 
is changed to Read/Write by a user who has the Modify rights to 
the file. = 


© The Supervisor-Equivalent User 


The supervisor-equivalent user is a user who is given the same 
authority on the' system as the SUPERVISOR user. Supervisor- 
equivalent users can create other superyisor-equivalent users. 


NetWare permits users to be made equivalent to other users. An 
equivalent users inherits all of the trustee rights of the user he or 
she is equivalent to. However, the SUPERVISOR has some 
capabilities that are not tied to trustee rights. 


The SUPERVISOR password can be changed by the supervisor or 
the supervisor-equivalent users. Many programs used to manage 
the network that have system security must be used under the 
login ID of the Supervisor and will not run for the supervisor- 
equivalent users. 


© The Workgroup Manager 


/ kgro , i f users To 
Workgroup Managers can either be users or a group o 
are given limited authority to create and manage users and groups. 


- 


\ 
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Workgroup Managers can perform the following tasks: . 
Y Create users and manage their accounts 
Y Delete users they have created 
¥ Create groups and add users to these groups 
¥ With appropriate file rights, create or modify trustee 
directory assignments, trustee file assignments, volume 


restrictions and disk space restrictions. 


Following are some tasks which the Workgroup Managers cannot 
perform 


x Create a user or group with rights that exceed those 
assigned to the workgroup manager. 


x Make auser or group a security equivalent of 
SUPERVISOR. 


x Manage users or groups they have not created, unless they 
are designated as a user account manager for those users. 


.* Modify the login restrictions of their own accounts 


* Create or delete print queues. 


@ The Account Manager 


An account manager is a user or group that is granted:the authority 
to manage specific users. z 


Account Managers can manage only the user accounts that are 
assigned to them. Unlike workgroup managers, user account 
managers cannot create users and groups. ; 
User account managers can perform the following tasks : 

¥ Delete users or groups they manage 


Y Assign a managed user to a managed group 
Local Area Networks a 
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V Assign a managed user or a group as a user account 
manager. 
Y With conropeists file rights, manage trustee and file 


assignments, volume restrictions and disk space 
restrictions. 


User account managers cannot perform the following tasks : 
* Create users or groups 


*. Assign users to groups that the user account manager 
does not manage 


x Modify restrictions placed on their own accounts 


x Assign a right to a user that exceeds the user account 
manager’s own rights. 


© The End User 


End Users make up the majority of the NetWare users. End users 
‘are capable of performing only the functions given to them by the 
other categories of users mentioned above. 


3.2 Working with the Password - SETPASS 

The user password is a key to network security. The administrator may 
have set up the network so that the user’s password expires after a 
certain number of days. When the user logs in on the day, the password 
has expired, NetWare prompts the user to set anew password. 


If the user needs or wants to change the password at any other time, he 
can do it in two ways : 


First by using the command : 
SETPASS 


and following the on-screen instructions. 
Second, by using the SYSCON utility (discussed in later sections). 
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3.3 Users and Groups : 


Before proceeding further, let us understand the concept of users and 
groups. 


Every NetWare user can be managed as an individual. Each user has a 
user ID (identification) and can be assigned specific network rights. 


When the network has a few users, however, it becomes burdensome to 
maintain rights lists for each user. NetWare therefore permits the user- 
to set groups that can be assigned the same rights as users in that 
group. When a user is made a member of a group, he/she inherits all of 
the rights that have been given to that particular group. For example, 
once the rights for the ACCT group are set up, it is a simple matter to 
drop users into the ACCT group and give them all the rights necessary 
to do their job. A user’s rights thus consist of all of the rights the user 
has been directly assigned, plus all the rights the user inherits from 


groups. 


The beauty of groups is that users can be moved from group to group 
quite easily as job assignments change. 
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3.4 Understanding Trustee Rights 


Most features of NetWare security are based on-the rights that are 
granted to users. Rights control-what a particular user or a group of 
users can do with a particular file or directory. For example, most users 
will have rights necessary to use NetWare commands, but not the rights 
necessary to delete those commands from the PUBLIC directory. The 
user will probably have rights to do anything within his/her HOME 
directory and its subdirectories, but will not have even the rights 
necessary to see anyone else’s home directory. 


Trustee rights can be assigned for directories and for files, giving the 
user detailed control over the network. They can also be assigned to 
users or to groups of users. 


Trustee assignments are also known as rights. They are the privileges 
users or groups have in a directory or file. 3 


3.4.1 Trustee Rights for Directories 


Trustee rights are the keys each user has for a directory. Rights are 
usually assigned to users at the directory level. 


The following table shows various trustee rights for directories : 


Grants the user all rights to the directories, all 
subdirectories, and all files in the directory 
and subdirectories. Enables the user to grant 
others the Supervisory right to files and 
subdirectories in the dire % 

Enables the-user to read the contents of files 
-in the directory. Users must have this right to 
read the data in a data file or to execute a 

am file 


Enables the user to write data to files in the 
directory. Users must have this right to modify 
the data in a file or to add data to a file. 

under the current directory. 
User can delete files and subdirectories from a 
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User can search directory and see file names. 


User can change file names and subdirectory 
names and attributes (this right does not allow 
user to change contents of file; only Write 
allows this) 

Enables the user to grant any of the preceding 
rights o other users on the network, with the 
exception of Supervisory. Only supervisors can 
pra erviso ight. 


Trustee Rights For Directories 


3.4.2 Trustee Rights for Files 


Rights can also be granted for individual files, which gives NetWare 
supervisors the ability to control file access at a very detailed level. File 
rights differ slightly from the comparable directory rights as shown in 
the table below : 


Grants the user all rights-to the file. Enables 
the user to grant others the Supervisory right 
to the file. 

Enables the user to read the contents of the 
file. Users must have this right to read the 
data in a data file or to execute a program file. 
Enables the user to write data to the file. Users 


must have this right to modify the data in a file 
or to add data to a file. ; 


Enables the user to recover the file with the 
SALVAGE utility ifit is deleted. 


Enables the user to delete the file. 


Enables the user to rename the file or change 
its attributes. ; 


Enables the user to see the file in a directory 

listing even when the user does not have the F 
ght for the directo: 

Enables the user to 
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3.5.3 Viewing Rights - RIGHTS command 
Purpose 
The RIGHTS command shows what rights the user has for a directory or 
a file. A user can have trustee rights to a file or a directory from two 
sources. The user can be granted rights for the specific directory or a 
file, or the user can inherit rights from a higher-level directory. The 
RIGHTS command sums up everything and reports the rights the user 
can actually exercise for a give directory or file. 
Syntax 
RIGHTS path 
When this command is executed, the syntax letter of each right in the 
current directory indicates whether the user has that particular right. 
For example the output of the Rights command may be : RWCEMFA 
indicating that the user has all the rights to that particular directory or 
file. í 
Examples 

=> RIGHTS SYSCON.EXE 


Reports the rights on the file SYSCON.EXE in the current 
directory. 


> RIGHTS 

Displays the rights to the current directory. 

> RIGHTS FS2/DATA:ACTFILES 

Reports on the rights of the directory ACTFILES. 


3.5.4 Assigning trustee rights - GRANT 


Purpose 
The GRANT command is used to grant trustee rights to users or groups. 


_ Any information changed by the GRANT command is permanent. 
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Syntax 
GRANT rightslist [for pathname] to [user | group] name 
The rightslist can be constructed from the following items : 


S Supervisory 

R Read 

WwW Write 

C Create 

E Erase 

M Modify 

F File Scan 

A Access Control 

ALL All rights s 
ALL BUT All rights except the rights that follow 
ONLY Only the rights that follow ; other rights are revoked. 


NO RIGHTS Revokes all rights 
Examples 
> GRANTRWCEM F to EVERYONE 


This command grants rights R,W,C,E,M and F for the current 
directory to group EVERYONE 


> GRANT ONLY RF FOR SYS:DATA\MYFILE.DAT TO OHARDY | 


The above command grants the rights of R and F of the file 
MYFILE.DAT in the SYS volume to the user OHARDY. 


> GRANT NO RIGHTS FOR *.DBF TO EVERYONE 


This command grants no rights for all files having extension 
“DBF” to the group EVERYONE. 


3.5.4 Taking away rights - REVOKE 


Purpose 
- The REVOKE command is used to take a ights from. Do A 
a directory or a file. is MESS NGS 
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Syntax 


_ REVOKE rightslist path FROM [USER | GROUP] name /SUB or /FILE 


The rightslist for REVOKE can consist of the following : 
‘Supervisory 
Read x 
Write : 
~ Create -. = 
Erase 
Modify 
File Scan 


Access Control 
ALL All rights 


PIZHAAAAH 


The REVOKE command can remove trustee rights from the directory or 
file for which they were granted. However, you cannot revoke sights from . 
a subdirectory or file for which specific rights were not granted earlier. 


If the user has granted rights at several levels of a directory tree, the 
right of an entire tree can be revoked by using the /SUB option. 


To revoke rights from files in the subdirectory tree, the / FILE option is 
used. : : à 


Examples 
=> REVOKE W FOR SYS:DIRI FROM SLAUREL /SUB 


The above command ensures that user SLAUREL has no W 
. rights assigned at any level of the subdirectory below DIRI 


3.5.5 REMOVE command 


Purpose 

even if all rights are revoked, a user or group remains a trustee of a file 
or directory. The REMOVE command removes the user or group from 
the trustee lists, i.e. it premanently removes the name of the user 
account from the directory’s trustee list. 
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Syntax 
REMOVE user] group name FROM path 


The username and groupname variables include either a user or group 
that is to be removed from a directory or file trustee list. 


Options 

IS Removes the user or group from all subdirectories in 
the specified path. 

/F Removes the user or group from files in the specified 
path. 

Examples _ 


> REMOVE GROUP TEMPS FROM CSOS/APPS:DATENTRY 


Removes the group TEMPS as a trustee from the DATENTRY 
subdirectory on volume APPS of server CSOS. 


> REMOVE FRED FROM CSOS/APPS:ALLDOCS 


Removes the user FRED from the trustee list of the ALLDOCS 
directory on volume APPS of file server CSOS. 


=> . REMOVE FRED FROM CSOS/APS:ALLDOCS /S 

Removes the user FRED from the trustee list of all 

subdirectories of the ALLDOCS directory on the volume APPS of 

server CSOS. : 
3.5.6 How directory and File Rights Combine 
Directory rights enable the user to grant rights to all of the files and 
subdirectories in a given part of the server's directory tree. Often the 
user needs to use the directory rights. ` 
When the user needs to touch up the details, however, the file rights are 


extremely useful. They can be built up with the directory ri i 
exactly the security required by the user. cea 


a aa 
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The following are two simple rules that determine how file and directory 
rights interact : ; 


© When the user is given a right to a directory, he or she ` 
automatically has that right to all files and subdirectories in the 
directory unless the right is specifically been removed. This 
characteristic is known as “Rights Inheritance”. 
For example if the TEMP directory has the rights RWCEMF then all 
the files and subdirectories under the TEMP directory would also 
have the same rights. . 


© When the user is granted specific rights to a file, the file rights 
override (take precedence over) the user’s directory rights to that 
file. ; 


For instance, if the TEMP directory has the RWCEMF rights. Let us 
assume that a file NEW.DOC exists under the TEMP directory.. 
Because of Rights Inheritance, the file NEW.DOC will also inherit 
the same rights as that of the TEMP directory. But if the W’ (Write) 
and the F’ (File Scan) file rights have been specifically removed 
then effectively the file NEW.DOC will have ‘RCEM’ rights only. 


3.5.7 Inherited Rights Mask (IRM) 


Righ ight form 
The Inherited ts Mask (IRM) can be used to prevent a right 
E ESA by a subdirectory. If an IRM filters out a right from a 

directory, the right will be filtered out of all subdirectories as well. Itis — 
possible to add rights back that were filtered out by the IRM. n 
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The ALLOW command (described in section 3.5.9) is used to set the IRM 
for a directory or a file. s 


; : ; : ti to 
When a directory is created, the rights are automatically se 
[SRWCEMFA]. This mask permits the directory to inherit all rights from 
the parent directory. 


The following is an example of how the IRM works : 


SYS:ACCT Directory Rights [ RWCEMF ] 
Effective Rights [ RWCEMF ] - 
SYS:ACCT\BUDGET IRM Rights [ SRWCEMFA ] © 


~ Effective Rights [ RWCEMF ] 


SYS:ACCT\BUDGET\OLD IRM Rights [SR F ] 
Effective Rights [ R F ] 


The IRM for SYS:ACCT\BUDGET has rights SRWCEMFA turned on. The 
directory rights of the parent directory i.e. SYS:ACCT are RWCEMF, 
hence the effective rights of SYS:ACCT\BUDGET become RWCEMF 
since only those match. 


Similarily the IRM for SYS:ACCT\BUDGET\OLD has only the R and F 
rights on , so only those rights become effective . This is so because only — 
those rights of the IRM of SYS:ACCT\BUDGET\OLD match the directory 
rights. 


The IRM can only take away rights. It cannot grant rights. Notice that 

even though the IRM for SYS:ACCT\BUDGET contains the S and A 
rights, these rights are not effective in the directory because they 

cannot be inherited unless the effective rights of the parent directory 
include them. 


Note : The Supervisory right is not affected by the IRM. The user is not 
permitted to remove the S right from an IRM because the user cannot 
_ prevent the S right from being inherited by a subdirectory. If the S right 
is granted to a user for.a directory, the right will apply to all 
subdirectories under the directory. x 
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3.5.8 Setting IRM - ALLOW command 

3 Purpose i 

Sets the Inherited Rights Mask for a directory or a file. 
Syntax 

ALLOW pathname [TO INHERIT] rightslist 


TO INHERIT is optional, but it does make the purpose of the command 
clear. i ; 


Examples 
= ALLOW O:\OFFICE\DATA TO INHERIT R F 
Sets the IRM for the O:\OFFICE\DATA directory to enable only 
Read and File Scan rights to be inherited from the OFFICE 
directory. 
-> . ALLOW H:\UTILS TO INHERIT Ro 


Sets the IRM for the H:\UTILS\NU directory to enable Read Only 
rights to be inherited from the UTILS directory. 


3.5.9 Effective Rights 


Effective rights are rights-a user can actually exercise in a given 
directory or file. To determine a user’s effective rights, there are two 
things which have to be known : : 


@ What rights were granted in trustee assignments. 

© What rights have been revoked with the IRM. 

Directory Rights can be thought of as locks that the user can put on the 
syste! NetWare gives each directory a full set of Jocks by default. 
Trustee Rights can be thought of as keys that fit the directory locks. 
Each user can have his or her own set of unique keys. As an example, 


think key set. It would have a house key, a cupboard key, a 
car Be aes ances are that no one has the same keys as you 
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have. Everyone has different locks that need to be opened. The same 
concept applies to networks. You may have specific needs in directories. 
Some users have the same needs as you and others have different 
needs. Each user should thus have his or her own set of rights i.e. keys 
(with reference to our example). 


Effective rights thus, are the trustee rights (keys) that actually match 
available directory rights (locks). If a lock exists and you do not have the 
key you cannot perform any function. Similarly if the user has a key and — 
no lock exists, he/she cannot perform the function. The only way the 
user can use a right is to have a matching locks and keys. 


The following example explains how effective rights are determined for a 
directory, a subdirectory and a file. 


© Directory’s effective rights 
In a directory, trustee assignments always override the directory’s 
IRM. If any trustee assignments have been made, a user’s effective 
rights are determined solely by the trustee assignment (TA). 


See the chart below for an example of determining the effective 
rights for JAN in the directory WORK\PROJECT.1. 


WORK 


Effective [ J 


PROJECT.1 


IRM [S ] 
Jan’sTA[ RWCEMF ] 


Effective[ RW C E MF] 


Since JAN’s trustee assignments was R, W, C, E, M 
are also her effective rights in the PROJECT.1 deaan. F, these 


The following summarises the principles g : 5 
rights in a directory. principles governing the effective 
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Is there a Trustee Assignment ? 


"= NO 
os | 

Effective Rights The user has no effective rights 
= Trustee Assignment. unless the user is a SUPERVISOR. 


© Sub-directory effective rights 


In subdirectories, effective rights are determined by one of the three 
methods : 


v By calculating the effective rights in the parent directory and 
then determining which rights the subdirectory’s Inherited 
Rights Mask will allow to filter through. 


Y By granting a user a trustee assignment to a subdirectory (the 
same as for a directory). 


Y By determining the user’s effective rights in the parent 
directory included the Supervisor right. 


In the following examples, Example 1 explains how to determine 
rights if no new trustee assignments are granted to the user. 
Example 2 explains how to determine rights when a new trustee 
assignment is granted to the user. Example 3 explains how to 
determine rights when the Supervisor right has been granted. 


Example 1. 


If no trustee assignments are granted, the IRM determines which 
effective rights a user can inherit from the parent directory. 


Step 1: To calculate the rights, first determine a user’s effective 
rights in the parent directory. 


In the example below, let us calculate Jan’s effective rights for the 
WORK directory : 
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Effective [ 


IRM[S RWC EMF Al 


Effective [ ] 
In this example, applying the formula Trustee Assignments = 
Effective Rights, Jan’s effective rights in the WORK directory are R, 
W, C, E, M, and F. 


Step 2: View the IRM of the subdirectory. 


@ Ifthe mask has all rights, the user’s effective rights in the 
subdirectory are the effective rights of the parent directory. 


@ Ifthe subdirectory’s IRM is modified by revoking some of the 
rights, the parent effective rights must be matched with the 
remaining rights in the mask. Only those that match will be an 
effective right in the subdirectory. 


In the example above, Jan’s effective rights in the STYLE directory 
are R, W, C, E, M and F because the IRM mask allows all rights to 
be inherited. 

Example 2. 

If a trustee assignment is made in a subdirectory, effective rights 
are determined the same as for a directory. The trustee assignment 
overrides the effective rights from the parent directory and the 


subdirectory’s IRM. The user's effective rights are those granted in 
the trustee assignment. 


For example, Jan's effective rights in the 1988.STY directory are R 
and F (Note that Jan’s TA remains the same as in Example i. What 
are Jan’s effective rights in the REVISED directory ? 


inaiea Navorks a a 


< 
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1988.STY 


Effective [ 


IRM[S RW CEM F A] 
Jan’sTA[ RWCEM F Aj 


Effective [ ] 


Jan’s effective rights in the REVISED directory are R, W, C, E, M, F 
and A. 


Example 3. 


If a user has been granted the Supervisory in the parent directory, 
the user has all rights to the subdirectory regardless of trustee 
assignments or modification of the IRM 


Suppose that Jan was made the Supervisor of a new project with 
the code name of UNICORN. As a project supervisor, the network 
Supervisor grants Jan the Supervisory: right to the UNICORN ' 
directory containing the project. What are Jan’s effective rights in 
the UNICORN directory. What are her rights in the PHASE.1 
directory. 


uv 


UNICORN 


IRM [S ] 

JansTA [S ] 

Effective [ ] 
IRM [S ] 
Effective [ ] 


’% effective rights in the UNICORN directory are all rights S, R, 
ae EM, me A. She has the same rights in the PHASE.1 
directory. 
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’s ri in the Phase.2 
In the example below, Jan’s rights were redefined in u p 
desto SR a new trustee assignment. What are Jan’s effective 


rights in the Phase.2 directory. 


UNICORN 


IRM [S ] 
Jan’sTA [S ] 


Effective [SRWCEMFA] 


IRM[S RWCEMF A] 
Jan’sTA[ R ] 


Effective [ 


Jan’s effective rights in the PHASE.2 directory are still all the 
rights. Her rights cannot be redefined below the UNICORN directory 
because she was granted the Supervisor right to the UNICORN 
directory. 

Summarising for determining subdirectory effective rights 


Is the S right an effective right 
in the Parent directory ? 


Effective Rights Is there a subdirectory TA ? 


= All Rights ae 


Yes No 
| | 
Effective Rights Will the IRM allow 
=TA. all rights to be inherited? , 
= Yes No 
lective Rights Effective rights of 
= Effective Rights of the parent ara 
parent directory. minus all rights 
revoked from the 
IRM. 
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© File Rights 


They are determined in nearly the same way as subdirectory 
effective rights. 


Y By calculating the effective rights in the directory and then 
determining which rights the file’s Inherited Rights Mask 
will allow to filter through. 


Y By granting a user a trustee assignment to a file. 


Y By determining the user’s effective rights in the parent 
directory included the Supervisor right.  - 


In the following examples, Example 1 explains how to determine 

rights if no new trustee assignments are granted at the file level. 

Example 2 explains how to determine rights when a new trustee 

assignment is granted at the file level. Example 3 explains how to 
` determine rights when the Supervisory right has been granted. 


Example 1. 


If no trustee assignments are granted to the file, the file’s IRM 
determines which effective rights a user can inherit from the 
directory. 


Step 1 : To calculate the rights, first determine a user’s effective 
rights in the parent directory. In the example below, calculate Jan’s 
effective rights for-the WORK directory. 


WORK 


IRM [ 
Jan’sTA [ M ] 


Effective [ If 
IRM[S RWCEMFA] 


Effective [ ] 
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In this example Jan’s effective rights in the WORK directory are R, 
W, C, E, M, and F. 


Step 2 : View the IRM of the file. 


+ Ifthe mask has all rights, the user’s effective rights in the 
file are the effective rights of the parent directory. 


@ Ifthe subdirectory’s IRM is modified by revoking some of the 
rights, the directory effective rights must be matched with the 
remaining rights in the mask. Only those that match will be an 
effective right in the file. 


In the previous example, Jan’s effective rights to the FILE.1 file are 
R,W, C, E, M, and F because the mask allows all rights to be 
inherited. What are they in the example below ? 

WORK 


IRM [SRWCEMFA] 
Jan’sTA | RWCEMF 


Effective | RWCEMF ] 


IRM [S R F j 
Effective [ ] 


In this example, Jan’s effective rights in FILE.2 are R and F. Notice 

that the Supervisory right has not been revoked from the IRM. This 

Hee Cais ies eee from an IRM. However, as this example 
ow shows, the S right in the mask has no effect if i 

peer r e ect if it has not been 


Example 2. 
If a trustee assignment is made ‘in a subdirec effective righ 
are determined the same as for a directory. Theva te i 
overid the efective rights fom the parent directory and the fe 

- The u i i é 
ETEN s ve rights are those granted in the trustee 


For example, Jan’s effective rights in the PROJ r 
and F. What are Jan’s effective rights to the FILES Sloe aaa 
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PROJECTS 


IRM [SRWCEMFA] 
Jan’sTA [ R F ] 
Effective [ R F ] 


IRM[SRWC EMF A] 
Jan’sTA | RWC EM FAJ 


Effective [ ] 


Jan’s effective rights to FILE.3 are R, W, C, E , M, F and A. 
Example 3. 


If a user has been granted the Supervisory in the parent directory, 
the user has all rights to the files regardless of trustee assignments 
or modification of the IRM. 


Suppose that Jan was made the Supervisor of a new project with 
the code name of UNICORN. As a project supervisor, the network 
Supervisor grants Jan the Supervisory right to the UNICORN 
directory containing the project. What are her rights to FILE.4 ? 


UNICORN 


IRM [S ] 
Jan’sTA [S ] 


Effective [SRWCEMFA] 
IRM [S ] 


Effective [ ] 


Jan’s effective rights to FILE.4 are S, R, W, C, E, M, F and A. 


example below, Jan’s rights were redefined in the FILE.S file. 
aa A ae assignment. What are Jan’s effective rights in 
the FILE.S5 file. 
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UNICORN 


IRM [S 
Jan’sTA [S ] 


Effective [S RW CEM F A} 


IRM[S RWCEM F Aj 
Jan’sTA[ R CF] 


Effective [ ] 


Jan’s effective rights in the FILE.5 file are still all the rights. Her 
tights cannot be redefined below the UNICORN directory because 
she was granted the Supervisor right to the UNICORN directory. 
Summarising for determining File effective rights 


Is the S right an effective right 
in the Parent directory ? 


oo 


Yes No 
| | 
Effective Rights Is there a file TA ? 


eae 


Yes No 
| | 
Effective Rights Will the file’s IRM allow 
=TA all rights to be inherited ? 
Yes No - ; 


l | 
Effective Rights = _ Effective Rights of the Parent 
Effective Rights of Directory minus all rights 
the Parent Directory revoked from the IRM. 


~ 
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3.6 File Attributes 


Attributes are different from rights in that they are not specific to any 
user or group of users. If, for example, the user has all rights to a 
directory, and he tries to delete a file that has the “Read Only” attribute, 
the user will not be able to do it. Attributes are thus conditions put on 
files. These conditions help to control what can be done to files and how 
files can be used on the network. NetWare attributes are frequently 
referred to as flags because the main tool for managing file attributes is 
the FLAG command. 

noe and directory attributes are slightly different. They are discussed 

ow: 


3.6.1 NetWare File Attributes 


Following are the File Attributes provided by NetWare. 


Archive needed Attribute A signifies that the particular 
file has been altered since the last 
backup. The Archive needed attribute is 
also assigned to files that have been 
copied to another directo: 


rer 
TED] 
OR | 
Execute Only X This attribute indicates that the 
or .EXE extension. 
If deleted, file is purged immediatel 


| Copy Inhibit | Ci 
Delete Inhibit File cannot be deleted 
Rename Inhibit 
particular file is permanently modified 
and the attribute cannot be removed. 
This attribute affects files’ having .COM 
Hidden Cannot be seen with a DOS DIR 
command and cannot be copied or 
deleted 
Can only be read, not written to or 
deleted (NetWare automatically assigns |- 
DI and RI attributes to files with this 


| Purge | 


Read Only 
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Description 
Cannot be seen by DOS DIR command, 
cannot be copied or deleted 
Files having attribute as T can be 
protected by the Transaction Tracking 
System(ITS) . This is important when 


several data files have to be modified as a 
part of a complex database operation. 
TTS ensures that one of the two things 
happen : the files are properly modified 
or none of the files are modified. This 
prevents the database from being 
corrupted. 


3.6.2 NetWare Directory Attributes 


Following are the Directory Attributes provided by NetWare. 


[Attribute [Syntax | Description _ _ 


Delete Inhibit paso bs, Cannot be deleted or copied 
over. 

Hidden Cannot be seen with a DOS DIR 
command and cannot be copied 
or deleted. 

ESBEARIE. 227 


This attribute is used to show 
directories in which all files are 
considered to be purged when 
deleted. d 

Cannot be renamed. 


_ System Sy Cannot be seen by DOS DIR 
command, cannot be copied or 
deleted. 


3.6.3 Displaying/Changing attributes - FLAG and FLAGDIR 


Purpose 


The FLAG command is used to display or change file attribute whi 
FLAGDIR lists or changes attributes of directories or Aa 


SSH OER LL a r r 
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Syntax 
FLAG path flaglist 
FLAGDIR path flaglist 


When FLAG is typed without any parameters, all files in the current 
directory are listed with their attributes. The attributes are listed using 
the abbreviations as listed in the above tables (Section 3.8.1 and 3.8.2). 
Attributes that are not turned on are shown as dashes. If either 
FLAG/FLAGDIR is to be used to change attributes of a 
directory /subdirectory then the “flaglist” option should be used. 


Options 

path Designates directory path that leads to the name of the file 
the user wants to view or change. 

flaglist Specifies one or more of the attributes 


The “flaglist” for changing File Attributes is listed below: , 
Note that the Description of these attributes is already mentioned in 
section 3.6.1. 


Subdirectory (Displays or changes file 
attributes in the’specified directory or 
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Example 
> FLAG CDI\SYS:PUBLIC\IBM_PC\MSDOS\5.00\*." SRo 


The above example flags every file on the server CDI in the 
MSDOS 5.00 directory under PUBLIC as Shareable Read Only. 


The “flaglist’” for changing Directory Attributes is listed in the next table 


Note that the Description of these attributes is already mentioned in 
section 3.6.2. 


Normal (Cancels all other directory 
attributes) 
Private (Used to hide directory 
names of all directories below the 
flagged directory). 
ine 


_ Example 
> FLAGDIR TRAINING_SOLUTIONS\SYS:USERS\TGEN P 
Flags the TGEN directory as private and prevents other users 3 


from seeing the subdirectories under it when the Dos DIR 
command will be used. 


Comman 


2i Maslefot a directory of a file. 
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3.7 Taking Care of Network Data 


Security is only part of the. solution to protecting the network data and 
applications. For example, no combination of passwords, rights and 
attributes will keep the data safe from the hard disk failures, power loss 
or fires. The user needs to be prepared for the worse and NetWare 
provides various tools to make it possible. : 


3.7.1 Backing Up Data 
Probably the most important precaution the user can take is to keep 
backup copies of his/her work. Usually, the system administrator is 
responsible for making backups of network data in a timely manner. 
NetWare has a built-in backup utility : i 

SBACKUP 
This utility can be used by System Administrators only. 


Note : The DOS BACKUP command to back up network files should not 
be used. It will appear to have worked, but DOS does not fully backup 
up all NetWare file and directory attributes. 


3.7.2 Recovering Erased Files 


times the user may delete a file/files which he needs. The utility 
sre available that help to recover lost files of NetWare is : 


SALVAGE 
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When SALVAGE is entered on the prompt, it displays the screen as 


given in Figure 3.2. 


Motuare File Salvagno Utility 3.75 ` Uednesday, Mut, 1994 2:187 pal 
MYNAME 


ou SISYPHUS/SYS : USERS TAYtWME/ GROUPS ` NRSV ay 


5-04-34 2:17:48pn 
6-18-93 9:59:28an 


Figure 3.2 - File Salvage Utility 


Choose the View/ Recover Deleted Files and then SALVAGE prompts} the 
user to enter the “erased file name pattern to match”. 
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3.7.3 Purging Erased Files 


Purpose 


There might be a situation when the user erases a file and does not 
want anyone to recover it. To make this possible the PURGE command 
is used 


When the PURGE command is entered, all recoverable erased files in 
the current directory are completely wiped out. 


There are two good reasons for purging the files : 


© For security purposes, to ensure that deleted files cannot be 
_ Salvaged. 


© For performance purposes. If NetWare must purge deleted files to 
make room for new ones, file system performance will be slowed 
down. 

Options 

PURGE 
or 


PURGE/ALL 


or 
PURGE directory path 
Examples 


> PURGE SYS:TEMP 
Purges all files in the SYS:TEMP directory. 


> PURGE/ALL 


Purges the current directory as well as any of the directory’s 
subdirectories. 
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3.8NetWare Utility Programs 


NetWare comes with many utility programs that the user can make use 
of to perform various tasks. For the most part, all these utilities have 
similar look and interface. The user can enter a command to start the 
utility, and then choose commands from various menus that appear, 
with each command often leading to another menu. The user can get 
help from within any NetWare utility program by pressing the F1 key. 
Following are some of the commonly used utility programs offered by 
NetWare : 


3.8.1 SYSCON 


SYSCON (System Configuration) is a primary tool and a powerful menu 
utility for managing users. It is a utility that supervisors use almost 
everyday. The utility can also be used by some users to change some 
aspects of the NetWare environment. te 


SYSCON enables the user to set up NetWare’s accounting feature, check 
file server information, create users and groups and perform 
administrative network functions. The main menu of SYSCON is the 
“Available Topics” menu as shown in the figure 3.3 below : 


July 5, 1994 8:35 pa 


f Available Topics 
Change Current Server 


| [File Server Infornation 
Group lnfornation 


Í Supervisor sania ' 


Figure 3.3 - Syscon Utility 
a EE EEE 
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The menu options are : 
© Accounting 


‘Some network installations turn on NetWare’s accounting feature 


so that users and departments can be charged for their network 
usage. 


i 


© Change ‘Current. Server 


If the user is working in a multi-server network, this option allows 
to select the correct server. ; 


© File Server Information 
This option displays several valuable facts about the server. 

© Group Information 
The user might also want to create groups to ER all the users 
on the network. This option does the same thing for groups what 
User Information does for users. 

@ Supervisor Options 
This option contains many of the crucial supervisor utilities. 

e User Information 


The first thing probably an user might do is add some user 
accounts. This option is used to create, delete and manage all user 
accounts. : . 


Let us have a look at the most commonly used SYSCON options : 


1. User Information 


ion option in the Available Topics menu enables ` 
The Une Iatan opea a e aa uae acain i 
option is chosen, it displays all user names who have an account on 
the network. Figure 3.4 shows the User Names window that lists 
the user accounts that have been established on the network. rs 
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When NetWare is installed, two users are created : GUEST and 
SUPERVISOR. The SUPERVISOR user is the supreme network user 
with all the rights. SUPERVISOR account cannot be deleted. ge z. 
GUEST on the other hand, is intended to provide an account with 
limited rights that any user can easily access. Instead of using the 
GUEST account, it is possible to delete it and create accounts 
specifically for each authorised user. > 


ne 7 


SYSCON 3.75 rsdat ý S, 1994 9736 pn 
User SUPERVISOR On File IRP 


Figure 3.4 User Names List 


© Creating and Deleting Users 


To create a new user 


Y Press Insert in the User Names list. (Figure 3.5). 
¥ Type the new user name in the box that appears. (Figure 3.6) 
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After the name of the new user is entered, the network prompts for 
Sere the home directory created for the new user on volume 
Press the Esc key if a Home directory is not to be created for the 
new user. 

If a new user has to be given a HOME directory, the path can be 
entered. ; 

After creating the new user’s account, NetWare creates the directory 
and assigns all rights to it for the new user. ; 


| SYSCON, 3.75 


Figure 3.5 Adding a user name 


To delete a user account 
Z Highlight the user name to be deleted in the User 
Names list. ~ 


Vv the Delete key. 
Several bee can be deleted by using the F5 key to select the 


names. 
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© Changing Passwords 


The Change Password option in the User Information menu adds B 
changes passwords. Users cannot see the password as Ri 5 ypa 
but are asked to repeat the new password to make sure i $ 
typed correctly. Supervisors do not need to know the old passwords, 
but users need to put in their old password before they can change 
it. 


TF ears aS g Tee 
Path to Create User's Howe Directory i 


"JRP/S¥S :USERS\HLLOYD 


Figure 3.6 Specifying a user’s home directory path 


2. Managing NetWare groups 


In NetWare, groups are designed to save time when privileges are 
granted to users. For example, a group can be created for each 
department on the network. This makes it easy to set up access 
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privileges and configure the network environment according to each 
group’s needs. If a person is assigned to a new department, simply 
move him. from one group to another to change their privileges to 
those of the new department. 


If the Group Information option is chosen from the Available 
Topics menu of the Syscon utility, a list of existing groups is 
displayed in the Group Names screen. ~ 


When NetWare is installed, the only group created by the system is 
the group EVERYONE. Every user added to the system is 
automatically added: to this group so global rights can be issued. 

Group EVERYONE can be used to grant privileges that are common 
to everyone on the network. 


To add a group: 


V Press the Insert key in the Group Names box (Reter to 
Figure 3.7). 


V A box will pop up and will ask the user the name of the 
group. (Group names can be 47 characters). i 


earls Tuesday? Judy: s 1994 0:58 pa 
d 1SOK On File Server HRP: : 5 


v Infornation 
enero 


e 


Figure 3.7 A list of group names 
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To add members to the group 


Y Select the group to which the members have to be added. 
(This brings up the Group Information menu). 


Y Select the “Member List” option. 
(Members of the selected group are listed in the Group 
Members screen, however initially when the group is 
created it has no members). 

Y Press the Insert key to list users that do not belong to the 
group. : 
For each user to be added to the selected group, highlight 
the user in the “Not Group Members” list and press FS. If 
more than one user has to be added to the group, Press F5 
to mark each of the users and then press Enter. 
(After the user presses the Enter key, the selected users 
are added to the selected group). 


To delete a group 


Y Highlight the group name 
Y Press the Delete key 


To rename a group 


Y Highlight the group name 

Y Press F3. 
(A box will be displayed where the modified group name 
will be entered). 


3.8.2 FILER 


The most important utility for managing directories and files is FILER, a 
menu-based utility. Some of FILER’s capabilities can be duplicated with 
NetWare or DOS command-line utilities. However, some of the most 
critical file management tasks can only be performed with FILER. The 
main menu of FILER is shown in Figure 3.8. 


Each of the options are described in brief below : E 


Ee ee 
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© ‘The Current Directory Information Menu : 


The first menu item in FILER, Current Directory Information, 
enables the user to see and assign the following information : 


Wa SPSS SSS 


NetHore Pile Bormtenaece 


Who created, or owns, a specific directory 
When a directory was created 

The directory attributes that apply 

The setting of the Inherited Rights Mask 


Who has specifically been granted rights to this directory 


) Tuesday July S, 
NRPASYS :LOGIN 


t: 


tory Contents 
Select Current Directory 
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Set Filer Options 
Volune Information 


Figure 3.8 Main Menu of FILER 
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© Directory Contents menu 


The next option of the FILER main menu, Directory Contents 
displays a list of subdirectories and files that are located in the 
current directory. The user can delete files and add or delete 


directories in this list. 
The following operations can be ie a using this option 


V Creating directories 
Directories can be created by pressing the Bese key and 
typing in the directory name. 


Y Deleting Files 


A file can be deleted by simply highlighting the filename 
« and pressing the Delete key. 


Y Deleting Directories , 


A directory can be deleted by highlighting the directory 
name and pressing the Enter key. However, deleting a 
directory also deletes all subdirectories and files that the 
directory contains., so FILER stops the user with-a menu. 
The user can thus make his choice by pressing the Enter 
key to confirm deletion. 


Y Renaming files and directories 
To rename files/ directories, highlight the entry and press 
the F3 key. The user will have to enter the new name for 
the file/ directory. 


If the user selects any directory name in the Directory Contents list a _ 
Subdirectory option menu is displayed as shown in Figure 3.9. 


a EE eee 
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NetHare File Hasntenance: 
i 3 SR 


El] |UieusSet Directory Infornation 
ER} [Who has rights here ^` 


(File) 
(file) 
(filed 
(fille) 


Figure 3.9 The Subdirectory Options menu 
The menu options are as follows : 
Y Copy Subdirectories’ files 
, This option copies any files in the subdirectory, but does 
not include files in lower-level subdirectories. If this option 


is selected, the user is asked to specify the destination 
. directory to which the files should be copied. 


V Copy Subdirectories’ structure 
This option copies all files and subdirectories that are 
stored in the subdirectory. The user is asked to specify the 
name of the subdirectory to which the subdirectory 
structure is to be copied.. 

Y Make this.your current directory 


Allows the user td choose a directory to make it current. 
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Y Move Subdirectories’ structure 


This option allows the user to relocate a subdirectory 
structure. The userisa asked to specify the new 
directory that should contain the subdirectory.. 


Y , View/Set directory structure 


Without making it the current directory, the user can 
manage a subdirectory’s information with this option. 


¥Y Who has Rights Here 


This option displays the subdirectory’s trustees with their 
trustee rights and security equivalences. The user must 
be logged in as a supervisor to view this information. 


@ Selecting a Current Directory 


Before the user starts working with FILER, he needs to make sure 
that the proper directory is being managed. When FILER is started, 
the current directory will be the same as the current directory when 
the FILER command was entered. The current directory is always 
displayed at the top of the FILER utility screen as shown in Figure?. 


If the user selects the Current Directory option, FILER brings up a 
box that enables the user to change the directory being viewed. : 


© Set Filer Options 


The fourth option of the FILER main menu, Set Filer Options, allows 
the user to configure options that determine how FILER will 
function. 7 


© The Volume Information menu 
The last option in FILER’s Available Topics menu, Volume 
Information about network volumes. This box is infarmational 
and none of the fields can be edited. ae my 


3.8.3 PCONSOLE 


PCONSOLE menu utility is a chief tool for creati z 
NetWare printing resources. ting and managing 
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NetWare has three levels of security associated with printing : 


© Queues must be created and configured by the supervisor or a _ 
supervisor equivalent. 


@ The supervisor can designate queue operators who can manage 
queues using PCONSOLE utility. 


@ The supervisor can grant users the right to place jobs into queues. 
The users can then manage their own print jobs. 


The first menu in PCONSOLE is the Available Options menu. This 
menu enables the user to choose from the following three options as 
shown in Figure 3.11. 


Suly 16, 1994 0 
et 


Figure 3.11 PCONSOLE Available Options Menu 
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The options of the PCONSOLE utility are as follows : 


i. 


Change Current File Server 


The information at the top of the screen identifies the user name 
and the server name on which the user is working. If the server is 
not the desired one, select Change Current File Server and specify 


the correct server name. 
Print Queue Information 


A print queue is actually a subdirectory located under the 
SYS:SYSTEM directory of a particular server. To create (or manage) 
a queue, the Print Queue Information option can be selected. A 
list of print queues is displayed. 

If the user is a supervisor or a supervisor equivalent, a new print 
queue can be created by 


Y Pressing the Insert key. 


V An input box prompts the user to enter a queue name. 


Y After the user presses an Enter key, the new queue name 
will be added to the Print Queues list. 


Defining Print Servers 

Before the print server software can be run, the user must 
configure the print server using PCONSOLE. A given print server 
can service print queues on several file servers. A separate print 
server definition must be entered for each file server that has 
queues to be serviced. 


Defining a print server involves several steps : 


V _ Creating the queues for a given file server. 
Y Defining the printers for the print server 
V Assigning queues to the printers that will service them 


Local Area Networks 420 


CC-0. Bhagavad Ramanuja National Research Institute, Melukote Collection. 


Funding: Tattva Heritage Foundation,Kolkata. Digitization: eGangotri. 


¥ Running the print server software to start the print server . 


3.8.4 SESSION 


Creating drive and mappings can be cumbersome since small typing 
errors can cause the MAP command not to work. Session, a NetWare 
utility program lets the user create drive mappings in a-menu driven 
environment. Session can thus be used to add, delete or modify. both 
drive and search mappings. The Available Topics menu of SESSION is 
displayed as shown in figure’3.12. > 


The user should note that everything that is. done using the SESSION 
utility is temporary, and is forgotten when the user logs out: of the 
network. Session is not therefore a substitute for the login script. 

1. Selecting the Current Server 


This option is used to display the currently attached server and 
making sure that the user is attached to the right server. 


5 set why T1994 BESA ia 
er HNORHAND On F : TU 
` y 


PP ing 
Select Default Drive 
User List 


Figure 3.12 The Session Available Topics Menu 
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2. Drive Mappings 
This option displays the current mappings. 
To add a drive mapping 
V Press the Insert key 


Y NetWare displays the next available drive letter asan - 
option. 


Y After a drive letter is selected, the next input box asks the 
user to type the directory path name, starting with the. 
server or volume. 


3. Group List 
The Group List option enables the user to send a message to 
members of a chosen group who are currently logged in to the 
network. 
If this option is chosen, a list of defined groups is displayed. 


Y Select the group which is to receive the message and press 
Enter. ; 


Y In the box titled “Message from ...” enter a message upto 
45 characters. 


Y Press Enter to transmit the message. 


4. Search Mappings 


This option allows the user to map search drives. When the Search 
Mappings option is chosen, the current search mappings are 
displayed. - 


Specifying search maps is similar to the process of defining a 

_ regular drive map. The major difference is that when the user 
defines a search map, he is made available the next available 
search drive number. 


————— a T T a 
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5. User List 


By selecting the User List option, NetWare first displays a Current 
Users list. One user can be selected by highlighting each one and 
pressing F5. After a user is selected, a Available-options menu is 
displayed which shows the following 2 options: 5 


© Display User Information 


This option enables the user to view information about:a 
specific user. A box is displayed that lists the user’s full name, 


when the user has logged on to the network, the user’s network 
node and address. ; : 


© Send Message 


If the Send Message option is chosen, a box is shown where a . 
message is entered. The message can be maximum 45 
characters in length. 


RR ate ae 


pea NetWare printing 
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Summary 
In this chapter we understood: 
[U The levels of NetWare Security. 
[U The SETPASS command to give a password 
Trustee Rights for Files and Directories 


What are Effective rights, Inherited Rights Mask and how to set 
IRM 


Cy 


© 


File Attributes 


a 


How to backup, recover and purge data 


As) The working of the commonly used utility programs 
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ANSWERS TO EXERCISES 


Chapter 1 - Network Basics 


Exercise 1. 


Il. Program and file sharing, Resource sharing, Ability to user network 
software. 


Exercise 2. 

I. 1. Bus and Point-to-Point ' 
2. Ring l 
3. Physical 
4. Protocol 


| : 
II. Physical, Data-link, Network, Transport, Session Présentation, 
Application. 


Exercise 3. 


— 


. 1. NetWare 
2. LOGIN 
3. System Login Script 
4. LOGOUT 


Il. The network operating system resides on the file server over and 
above DOS, while as the workstation operating cs is present on 
each individual workstation. 


Chapter 2 - Working With NOS 


Exercise 1. 


I. 1. Volumes 
2. Root 


SS ee one 


1 
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3. Hierarchical file system 


4. Operating syst 


em, Application, Private Data, Shared Data 


5. SYS:LOGIN, SYS:SYSTEM, SYS: PUBLIC, SYS:MAIL 


II. FS1/SYS: PUBLIC\ PACKAGES \ACCESS\ACCESS.EXE 


Exercise 2. 


I. 


0 N m 


_NDIR /REV /SORT /OW 
. NDIR /SORT /CR 
. NDIR /SORT /SI 


. NDIR /FO 
. NDIR /SUB 


. NDIR /A 
. NDIR /NOT /S 


. NDIR /CR BEF 03-04-95 
2. 


NDIR /SI GR 1000 


Exercise 3. 


I. 


NAGA ES 


. LISTDIR GAMES /E 


NCOPY *.* C:\TEMP /M 
NCOPY FANTASY.DOC FANTA.DOC /V 


MAP 

MAP M:=DATABASE\ FOXPRO 
MAP DEL M: 

MAP S1:=C:\USER\DATA 


The advantage if the MAP command is that it can be used to access 
a particular location on the disk very easily, hence changing drives 
becomes quick and convenient. 


Exercise 4. 


I. 1. 
2. 
3. 
4. 


I. 


Printers 
NPRINT 
CAPTURE 
ENDCAP 


Redirecting printer output, Waiting in a t añe 
the queue to the printer. print queue, Moving from 


Answers ii 
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Exercise 5. 


4. 


Il. The CASTOFF command is used te prevent messages being received 
by the workstation sent from the file server; whileas the CASTON 
command is used to resume receiving the messages. 


Exercise 6. 
I. 1. Console 

. DOWN 

. E-Mail 

OFF ` 


PONH 


` 


I. CLEAR STATION 
Removes all file server resources from the specified workstation, 
and breaks the link between the file server and the workstation. 


EXIT 
Returns the File Server console to DOS after the down command 
has been used. : 


DISABLE LOGIN 
Prevents users from logging in to the file server. 


Chapter 3 - NetWare Security and Utility Programs 


Exercise 1. 


I. 1. Login, Rights, Attributes, File Server, Bindery ' 
2. SUPERVISOR 
3. End Users 
4. Account Manager 
5. SETPASS 


Il. Prevents from un-authorised access, protects important aata 2 


i 
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Exercise 2. 


I. 1. RIGHTS 


Il. Trustee Rights are rights each user has for a file/ subdirectory. 


Rights Inheritance is a property by which files/subdirectories 
inherits all the rights of the parent directory. 


Exercise 3. 


I. 1. IRM 
2. Effective Rights — 
3. Attributes 
4. ALLOW 
5. FLAGDIR 


II. Rights control what a particular user or a group of users can do 
with a particular file/directory, whereas Attributes are not specific 
to a user -or group of users but they put conditions on 
files/directories and control what can be done with them. j 


Exercise 4. 
LIT 
2. F 
3. F l 
I. -FILER 
SESSION 
SYSCON 
PCONSOLE 
Answers Gv A 
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APPENDIX 
PRODUCTS AVAILABLE 


Following are some of the most popular products of the network 
operating systems that are available : 


° NetWare Lite 


This is a DOS based peer-to-peer operating system. It has been 
designed for 2 to 25 users who need to share resources on each others' 
systems in a peer-to-peer arrangement, but who do not need or want to 
dedicate a system as a full-time server. 


© NetWare ver2.2 


NetWare ver 2.2 is an 80286 based operating system. It requires 2 MB 
RAM and operates in the protected mode of the 286 unlike DOS which 
operates in the real mode. Hence, it can utilize the full capabilities of 
the microprocessor. NetWare ver 2,2 is suited for small to medium sized 
businesses and for workgroups within large companies. ~ 

The server can be dedicated to improve performance or non-dedicated to 
improve costs. Up to a 100 users are supported, and the product 
supports internetworking. 


@. NetWare ver 3.11 


This is a 32-bit operating system based on the 80386. This os utilizes 
the protected mode of the microprocessor like ver 2.2. It requires 4 MB 
RAM and a 50 MB hard disk. NetWare ver 3.11 is especially suited for 
large companies that need to network hundreds of users on a single 
server. It has been designed for enterprise wide networking implying 
that multivendor platforms cani connect to the network directly. 


i inicomputers, mainframes, LAN manager servers, OS/2 ` 
eas nae een r MAC systems and DOS systems. It has a built- 
in routing capability and is easily scaleable. 


a ST 
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e NetWare ver 4.0 


NetWare 4.0 improves on the performance of NetWare 3.11 by providing 
support for Wide Area Networking and internetworking. Its minimum 
requirements are an 80386 with 6 MB RAM and 12 - 60 MB hard disk. 


This OS is highly suited for multi-server systems because the user need 
not log in on each server in order to access its resources. 

The most important feature of NetWare 4.0 is NetWare Directory 
Services (NDS) which enables network administrators to organize users 
and resources such as servers and printers the way people naturally 
access them. Each user and resource is viewed as an object by the NDS 
system, and is tracked in a _network-wide database. Network 
management is centralized and Windows-based. Administrators who 
need to manage the system and users who need to access resources or 
contact other users can quickly find objects in the NDS system, no 
matter where they are located on the internetwork. The database is 
constantly updated throughout the network, so that it holds the latest 
information about the objects. NDS makes setup, tracking and 
management of a WAN or an internetwork very easy. ` 


o Banyan Vines ver 5.52 


VINES stands for Virtual NEtworking System. This NOS is an easy to 
use distributed network OS because it incorporates a distributed 
directory service which has a principle similar to NDS. VINES standard 
based architecture integrates all network services and applications into 
a single system. These shared resources can include applications, 
databases, printers and host connections. ; 

Clients based on DOS, Windows and OS/2 can transparently access 
resources of a VINES network. All‘VINES servers, independent of their ` 
make are fully compatible with each other. : : 

However, VINES lacks a proper SFT (System Fault Tolerance). system. 
Backup options and disk utilization have not been addressed correctly. 


o Microsoft LAN Manager ver 2.2 


This is not an OS but an application providing network capabilities to a 
desk-top operating system. lt requires an 80386 with 8 MB RAM and a 


Appendix ii 


‘ ` 


CC-0. Bhagavad Ramanuja National Research Institute, Melukote Collection. 


Funding: Tattva Heritage Foundation,Kolkata. Digitization: eGangotri. 


30 MB hard-disk. Its performance is comparable to NetWare 2.2 but is a 
little weak in implementation of administration tools. 


(o) Windows NT with Advanced server 


Another Microsoft product, Windows NT is a peer-to-peer system while 
Advanced server is of the client server type. This product is part of the 
Windows NT kernel. It supports a variety of communication protocols. It 
needs a 386 with 16 MB RAM and 100 MB hard-disk. It has a good user 
interface and good distributed security implementation. However, the 
support for enterprise networking is not well developed. 
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GLOSSARY 


Access 


The ability to work with directory and files, in NetWare, usually used in 
connection with files stored on file server disks. Various access rights 
may be assigned to users. 

Archive 


To back-up data files and programs in case the data on the file server is 
lost. 


Attributes 
Assign special properties to files and directories. 
Archive needed attribute 


Can be assigned only to files. NetWare automatically assigns this 
attribute to any file that is modified after the last backup. 


Bindery 


It is a database file that contains definition for entities such as users, 
groups and workgroups. 


Bridge 


Manages the exchange of data packets from one network cabling system 
to another. > 


Bus 


path i j f signals travel either 
The way through which data in the form of i 

within the computer or between computers. This path is shared by 
various devices connected to the computer. 
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Communication Protocol 


Set of rules or conventions used by a program or an operating system to 
establish communication between two or more cadpomts: 


Connection Number 


A temporary number assigned to each of the workstations whenever a 
connectivity is established with the file server. 


Dedicated File Server 


One or more computers are set aside as file servers an cannot be used 
for anything else 


Default Drive 

The drive that a workstation is currently using. 
Default Server 

The file Server to which the default drive is mapped. 
Directory attributes ; 

Assign special properties to directories 

Directory Rights i 


Control which directories, subdirectories a user can access and what 
the user is allowed to do with them 


Directory Structure 


It is a system used to organise all network files on the file server’s hard 


Drive Mappings 
Provide direct access to particular locations in the directory structure. 


i 
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Effective Rights > 


Rights that a user can actually exercise in a given directory, 
subdirectory or file. To determine a user’s effective rights, the user must ' 
know what rights were granted in trustee assignments and what rights 
have been revoked with the Inherited Rights Mask. 

Everyone 


Itisa system-created group that includes all users created on the file 


server. 
File Attributes 

Assign special properties to directories 
File Rights 


Control which directories, subdirectories a user can access and what 
the user is allowed to do with them 


File Server 
A computer that runs the NetWare operating system software. 
File Sharing ; 


A feature of networking that allows more than one user to access the 
same file at the same time. s 


Gateway 


A hardware or a software package that allows communication between 
dissimilar protocols. 


Groups 


Provide a way to simplify network administration by dealing with users 
collectively rather than individually. 


: T Glossary. 
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Guest 


Serves as a user name for anyone who needs temporary and restricted 


access to the file server. 


Home Directory 

Every user on the network needs some space to store his/her programs 
and files and also worl with the network. Considering this need every 
user on the network is also provided with a directory with all privileges. 
Such a directory is known as “home” or “user” directory. ; 


Host 


The central computer in a multi-user environment to which all the 
terminals are connected. It controls the network and stores all the 


software including data. 


Hub 

A device used on certain network topologies that modifies transmission 
signals, allowing the network to be lengthened or expanded with 
additional workstations. 

Inherited Rights Mask 


Are given to each file and directory at creation and controls which rights 
the users can inherit. i 


Log Out 


Logging out of a file server terminates the file server to workstation 
connection and any drives mapped to that server. 


Login 


A procedure that initialises the user’s security rights and the user’s 
environment. : 


Login Script 


Contain commands that initialise environmental variables 
drives, and control the user’s program execution. , map network 
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To assign a drive letter to a chosen directory path on a particular 
volume of a particular file server. 


. Multiserver network 


A network with more than one file server. Any user on the network may 
access any file server to which they are assigned a user name. 


NetWare Operating system 


The operating system developed by Novell, Inc. It runs the file server 
and controls the systems resources‘and information processing on the 
_ entire network. 


NetWare Shell 


NetWare software which is loaded into the memory os each workstation 
which enables the workstation to communicate with the file er. The 
NetWare shell interprets workstation requests before reaching DOS and . 
routes requests to a NetWare file server. 


Network 


A group of computers that can communicate with each other, share 
peripherals (such as hard disks and printers), and access remote hosts 
on other networks. 


Network address 


A hexadecimal number which identifies a network’s cabling system. A 
network on a cabling system will have only one address. An eight digit 
number is used in NetWare. 


Network communication 


Data transmission between network stations. 


Network Interface card 


A card installed in each network workstation to allow them to 
communicate with each other and with the file server. 
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Passwords 


A password is the word a user must know to log in to the network, 
provided a password is required. 


Path 


Represents a NetWare directory path, including the filer server, volume, 
directory, subdirectory, or file that is needed in the command. 


Print Queue 


Creates using the PCONSOLE utility. It stores the print job until the 
printer is ready to print it. 


Print Server 


A workstation that has a printer connected which can be shared by 
many users. The workstation thus acts as a dedicated print server. 


PUBLIC directory 


Directory which is automatically created on the SYS: volume during 
network installation and cannot be deleted. 


Purge attribute 

Can be assigned to files and directories. When assigned to a file, this 
attribute purges the file as soon as it is deleted. When assigned to a 
directory, it purges all the files in the directory when the files are 
deleted. 

Queue 


Temporary hoding area for print jobs. The jobs are accumalated in 
queues and sent to the appropriate printer as it is ready. 


Remote 


A connection between a LAN and a workstation or a network, often 
using telephone lines. ; 
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Rights 


Control which directories, subdirectories and files a user can access and 
what the user is allowed to do with them. 


Root directory 


The highest level in a hierarchical directory structure. With NetWare, 
the root directory is the volume, all other directories are subdirectories 
of the volume. 


Search Drive 

A drive that is automatically searched by the operating system when a 
requested file is not found in the current (default) directory. A search 
drive allows a user working in one directory to access an application 
that is located in another directory. : 
Security 

Controls access to information stored on network volumes. 


System Fault Tolerance (SFT) 


Duplicating data on multiple storage devices so that if one storage 
device fails, the data is available from another device. 


Shareable attribute A 


Can be assigned to files. This attribute allows the file to be used by 
more than one user at a time and is usually used in combination with 
the Read Only attribute. ; 

Supervisor 

The username for the network supervisor or system administrator. 
Supervisory right 

Grants all rights to the directory or file. 
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Topology 
The physical layout of network components. 
Transaction Tracking System 


Protects database applications from corruption caused when a server, 
workstation or network failure interrupts a database transaction. 


Trustee Assignments 


Control which directories, subdirectories and files a user can access and 
what work a user or a group is allowed to do within them. 


Users 


Any person allowed to work on a network. 


User Accounts 


Each user has a user account which is a part of network security and 
also helps in controlling user environment. 


Utilities 


The NetWare Utilities add functionality to the NetWare operating 
system. . 


Volume 


The highest level in the NetWare directory structure. It is a physical 
amount of hard disk storage space and is fixed in size. 


Wireless LAN 


A LAN in which nodes communicate with each other without the aid of 
the physical channel. 


Workstation 


A personal computer (or other device) connected to a network by means 
of a network interface card and a communication medium and is used to 
perform tasks through application programs or utilities. : 
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